Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE: 2016:1997-1 Critical: Java-1_7_0-openjdk Security Update

suse
Calendar Grey August 9, 2016
Scroller Suse
Important upgrade for SUSE java-1_8_0-openjdk addresses various problems and weaknesses, enhancing overall security.
An update that solves 11 vulnerabilities and has three An update that solves 11 vulnerabilities and has three An update that solves 11 vulnerabilities and has three fixes is now av...

Summary

This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.7 - OpenJDK 7u111 * Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking (bsc#989732) - S8145446, CVE-2016-3485: Perfect pipe placement (Windows only) (bsc#989734) - S8147771: Construction of static protection domains under Javax custom policy - S8148872, CVE-2016-3500: Complete name checking (bsc#989730) - S8149962, CVE-2016-3508: Better delineation of XML processing (bsc#989731) - S8150752: Share Class Data - S8151925: Font reference improvements - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733) - S8155981, CVE-2016-3606: Bolster bytecode verification (bsc#989722) - S8155985, CVE-2016-3598: Persistent Parameter Processing (bsc#989723)

Topics%20covered

Topics Covered

security advisory critical important SUSE java-1_7_0-openjdk

References

#982366 #984684 #988651 #989722 #989723 #989725

#989727 #989728 #989729 #989730 #989731 #989732

#989733 #989734

Cross- CVE-2016-3458 CVE-2016-3485 CVE-2016-3498

CVE-2016-3500 CVE-2016-3503 CVE-2016-3508

CVE-2016-3511 CVE-2016-3550 CVE-2016-3598

CVE-2016-3606 CVE-2016-3610

Affected Products:

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Desktop 12-SP1

https://www.suse.com/security/cve/CVE-2016-3458.html

https://www.suse.com/security/cve/CVE-2016-3485.html

https://www.suse.com/security/cve/CVE-2016-3498.html

https://www.suse.com/security/cve/CVE-2016-3500.html

https://www.suse.com/security/cve/CVE-2016-3503.html

https://www.suse.com/security/cve/CVE-2016-3508.html

https://www.suse.com/security/cve/CVE-2016-3511.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1997-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical important SUSE java-1_7_0-openjdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.