Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2019:0617-1 Important: Java-1_8_0-ibm Security Update

suse
Calendar Grey March 15, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for java-1_8_0-ibm ___________________________________________
An update that fixes four vulnerabilities is now available

Summary

This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299). - CVE-2018-1890: Fixed a local privilege escalation via RPATHs (bsc#1128158). - CVE-2019-2449: Fixed a vulnerabilit which could allow remote atackers to delete arbitrary files (bsc#1122292). More information: https://www.ibm.com/support/pages/security-bulletin-multiple-vulnerabilities-may-affect-ibm%C2%AE-sdk-java%E2%84%A2-technology-edition-8 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Topics%20covered

Topics Covered

security advisory important file disclosure java-1_8_0-ibm SUSE OpenStack

References

#1122292 #1122293 #1122299 #1128158

Cross- CVE-2018-11212 CVE-2018-1890 CVE-2019-2422

CVE-2019-2449

Affected Products:

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Software Development Kit 12-SP4

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Linux Enterprise Server 12-SP1-LTSS

SUSE Enterprise Storage 4

https://www.suse.com/security/cve/CVE-2018-11212.html

https://www.suse.com/security/cve/CVE-2018-1890.html

https://www.suse.com/security/cve/CVE-2019-2422.html

https://www.suse.com/security/cve...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:0617-1
Rating: important

Topics%20covered

Topics Covered

security advisory important file disclosure java-1_8_0-ibm SUSE OpenStack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here