Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE Leap 42.1: 2016:2051-1 Important: Java Security Fix

opensuse
Calendar Grey August 11, 2016
Dist Opensuse Esm H88
Critical security enhancement for java-1_8_0-openjdk in openSUSE rectifying 13 vulnerabilities and numerous improvements.
An update that solves 13 vulnerabilities and has three An update that solves 13 vulnerabilities and has three An update that solves 13 vulnerabilities and has three fixes is now av...

Description

This update for java-1_8_0-openjdk fixes the following issues:

- Upgrade to version jdk8u101 (icedtea 3.1.0)

- New in release 3.1.0 (2016-07-25):

* Security fixes

- S8079718, CVE-2016-3458: IIOP Input Stream Hooking (bsc#989732)

- S8145446, CVE-2016-3485: Perfect pipe placement (Windows

only) (bsc#989734)

- S8146514: Enforce GCM limits

- S8147771: Construction of static protection domains under Javax

custom policy

- S8148872, CVE-2016-3500: Complete name checking (bsc#989730)

- S8149070: Enforce update ordering

- S8149962, CVE-2016-3508: Better delineation of XML processing

(bsc#989731)

- S8150752: Share Class Data

- S8151925: Font reference improvements

- S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)

- S8153312: Constrain AppCDS behavior

- S8154475, CVE-2016-3587: Clean up lookup visibility (bsc#989721)

- S8155981, CVE-2016-3606: Bolster...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.1:

zypper in -t patch openSUSE-2016-978=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Leap 42.1 (i586 x86_64):

java-1_8_0-openjdk-1.8.0.101-15.1

java-1_8_0-openjdk-accessibility-1.8.0.101-15.1

java-1_8_0-openjdk-debuginfo-1.8.0.101-15.1

java-1_8_0-openjdk-debugsource-1.8.0.101-15.1

java-1_8_0-openjdk-demo-1.8.0.101-15.1

java-1_8_0-openjdk-demo-debuginfo-1.8.0.101-15.1

java-1_8_0-openjdk-devel-1.8.0.101-15.1

java-1_8_0-openjdk-devel-debuginfo-1.8.0.101-15.1

java-1_8_0-openjdk-headless-1.8.0.101-15.1

java-1_8_0-openjdk-headless-debuginfo-1.8.0.101-15.1

java-1_8_0-openjdk-src-1.8.0.101-15.1

- openSUSE Leap 42.1 (noarch):

java-1_8_0-openjdk-javadoc-1.8.0.101-15.1

References

https://www.suse.com/security/cve/CVE-2016-3458.html

https://www.suse.com/security/cve/CVE-2016-3485.html

https://www.suse.com/security/cve/CVE-2016-3498.html

https://www.suse.com/security/cve/CVE-2016-3500.html

https://www.suse.com/security/cve/CVE-2016-3503.html

https://www.suse.com/security/cve/CVE-2016-3508.html

https://www.suse.com/security/cve/CVE-2016-3511.html

https://www.suse.com/security/cve/CVE-2016-3550.html

https://www.suse.com/security/cve/CVE-2016-3552.html

https://www.suse.com/security/cve/CVE-2016-3587.html

https://www.suse.com/security/cve/CVE-2016-3598.html

https://www.suse.com/security/cve/CVE-2016-3606.html

https://www.suse.com/security/cve/CVE-2016-3610.html

https://bugzilla.suse.com/984684

https://bugzilla.suse.com/987895

https://bugzilla.suse.com/988651

https://bugzilla.suse.com/989721

https://bugzilla.suse.com/989722

https://bugzilla.suse.com/989723

https://bugzilla.suse.com/989725

https://bugzilla.suse.com/989726

https://bugzilla.suse.com/989727

https://bugzilla.suse.com/989728

http...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:2051-1
Rating: important
Affected Products: openSUSE Leap 42.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here