Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

openSUSE Leap 42.3: 2019:0042-1 Important: Java Security Issues Fix

opensuse
Calendar Grey January 12, 2019
Dist Opensuse Esm H88
A crucial security patch for java-1_7_0-openjdk addresses 13 vulnerabilities in openSUSE. Discover the main enhancements.

An update that fixes 13 vulnerabilities is now available.

Description

This update for java-1_7_0-openjdk to version 7u201 fixes the following

issues:

Security issues fixed:

- CVE-2018-3136: Manifest better support (bsc#1112142)

- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)

- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)

- CVE-2018-3169: Improve field accesses (bsc#1112146)

- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)

- CVE-2018-3214: Better RIFF reading support (bsc#1112152)

- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)

- CVE-2018-16435: heap-based buffer overflow in SetData function in

cmsIT8LoadFromFile

- CVE-2018-2938: Support Derby connections (bsc#1101644)

- CVE-2018-2940: Better stack walking (bsc#1101645)

- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)

- CVE-2018-2973: Improve LDAP support (bsc#1101656)

- CVE-2018-3639 cpu speculative store bypass mitigation

This update was imported from the...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update important openSUSE java fix patch instructions JDK issues

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2019-42=1

Package List

- openSUSE Leap 42.3 (i586 x86_64):

java-1_7_0-openjdk-1.7.0.201-54.1

java-1_7_0-openjdk-accessibility-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-devel-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-headless-1.7.0.201-54.1

java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-debugsource-1.7.0.201-54.1

java-1_7_0-openjdk-demo-1.7.0.201-54.1

java-1_7_0-openjdk-demo-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-devel-1.7.0.201-54.1

java-1_7_0-openjdk-devel-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-headless-1.7.0.201-54.1

java-1_7_0-openjdk-headless-debuginfo-1.7.0.201-54.1

java-1_7_0-openjdk-src-1.7.0.201-54.1

- openSUSE Leap 42.3 (noarch):

java-1_7_0-openjdk-javadoc-1.7.0.201-54.1

References

https://www.suse.com/security/cve/CVE-2018-13785.html

https://www.suse.com/security/cve/CVE-2018-16435.html

https://www.suse.com/security/cve/CVE-2018-2938.html

https://www.suse.com/security/cve/CVE-2018-2940.html

https://www.suse.com/security/cve/CVE-2018-2952.html

https://www.suse.com/security/cve/CVE-2018-2973.html

https://www.suse.com/security/cve/CVE-2018-3136.html

https://www.suse.com/security/cve/CVE-2018-3139.html

https://www.suse.com/security/cve/CVE-2018-3149.html

https://www.suse.com/security/cve/CVE-2018-3169.html

https://www.suse.com/security/cve/CVE-2018-3180.html

https://www.suse.com/security/cve/CVE-2018-3214.html

https://www.suse.com/security/cve/CVE-2018-3639.html

https://bugzilla.suse.com/1101644

https://bugzilla.suse.com/1101645

https://bugzilla.suse.com/1101651

https://bugzilla.suse.com/1101656

https://bugzilla.suse.com/1112142

https://bugzilla.suse.com/show_bug.cgi?id=1112143

https://bugzilla.suse.com/1112144

https://bugzilla.suse.com/1112146

https://bugzilla.suse.com/1112147

https://b...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2019:0042-1
Rating: important

Topics%20covered

Topics Covered

security advisory security update important openSUSE java fix patch instructions JDK issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here