Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

SUSE: 2019:2028-1 Important: java-1_7_0-openjdk Security Fix

suse
Calendar Grey July 31, 2019
Dist Suse Esm H88
Crucial patch released for java-1_8_0-openjdk addresses 12 major vulnerabilities in Red Hat environments.
An update that fixes 10 vulnerabilities is now available

Summary

This update for java-1_7_0-openjdk to version 7u231 fixes the following issues: Security issues fixed: - CVE_2019-2426: Improve web server connections (bsc#1134297). - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol handling (bsc#1141789). - CVE-2019-2769: Better copies of CopiesList (bsc#1141783). - CVE-2019-2786: More limited privilege usage (bsc#1141787). - CVE-2019-2816: Normalize normalization (bsc#1141785). - CVE-2019-2842: Extended AES support (bsc#1141786). - CVE-2019-7317: Improve PNG support (bsc#1141780). - CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE (bsc#1087082). - Certificate validation improvements Patch Instructions:

References

#1087082 #1134297 #1141780 #1141782 #1141783

#1141784 #1141785 #1141786 #1141787 #1141789

Cross- CVE-2018-3639 CVE-2019-2426 CVE-2019-2745

CVE-2019-2762 CVE-2019-2766 CVE-2019-2769

CVE-2019-2786 CVE-2019-2816 CVE-2019-2842

CVE-2019-7317

Affected Products:

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Desktop 12-SP4

https://www.suse.com/security/cve/CVE-2018-3639.html

https://www.suse.com/security/cve/CVE-2019-2426.html

https://www.suse.com/security/cve/CVE-2019-2745.html

https://www.suse.com/security/cve/CVE-2019-2762.html

https://www.suse.com/security/cve/CVE-2019-2766.html

https://www.suse.com/security/cve/CVE-2019-2769.html

https://www.suse.com/security/cve/CVE-2019-2786.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:2028-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here