Alerts This Week
Warning Icon 1 1,213
Alerts This Week
Warning Icon 1 1,213

SUSE: 2019:1219-1 Important: Java-1_8_0-Openjdk Remote Code Execution

suse
Calendar Grey May 13, 2019
Dist Suse Esm H88
SUSE issues updates for java-1_8_0-openjdk addressing important issues effectively. Update now!
An update that fixes 7 vulnerabilities is now available

Summary

This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729). - CVE-2019-2422: Better FileChannel (bsc#1122293). - CVE-2018-11212: Improve JPEG (bsc#1122299). Non-Security issue fixed: - Disable LTO (bsc#1133135). - Added Japanese new era name. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2019-1219=1

Topics%20covered

Topics Covered

security advisory remote code execution DoS important SUSE java-1_8_0-openjdk

References

#1122293 #1122299 #1132728 #1132729 #1132732

#1133135

Cross- CVE-2018-11212 CVE-2018-3639 CVE-2019-2422

CVE-2019-2426 CVE-2019-2602 CVE-2019-2684

CVE-2019-2698

Affected Products:

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Linux Enterprise Server 12-SP1-LTSS

SUSE Linux Enterprise Desktop 12-SP4

SUSE Linux Enterprise Desktop 12-SP3

SUSE Enterprise Storage 4

https://www.suse.com/security/cve/CVE-2018-11212.html

https://www.suse.com/security/cve/CVE-2018-3639.html

https://www.suse.com/se...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:1219-1
Rating: important

Topics%20covered

Topics Covered

security advisory remote code execution DoS important SUSE java-1_8_0-openjdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here