Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

SUSE: 2020:0466-1 Important: java-1_8_0-ibm Denial of Service

suse
Calendar Grey February 25, 2020
Dist Suse Esm H88
Significant security patch for java-1_8_0-ibm on SUSE Linux resolving various severe vulnerabilities and enhancing overall robustness.

An update that fixes 5 vulnerabilities is now available.

Summary

This update for java-1_8_0-ibm fixes the following issues: Java 8.0 was updated to Service Refresh 6 Fix Pack 5 (bsc#1162972, bsc#1160968) - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2019-4732: Untrusted DLL search path vulnerability - CVE-2020-2593: Normalize normalization for all - CVE-2020-2604: Better serial filter handling - CVE-2020-2659: Enhance datagram socket support Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2020-466=1 - SUSE Linux Enterprise Server 15-LTSS:

References

#1160968 #1162972

Cross- CVE-2019-4732 CVE-2020-2583 CVE-2020-2593

CVE-2020-2604 CVE-2020-2659

Affected Products:

SUSE Linux Enterprise Server for SAP 15

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1

SUSE Linux Enterprise Module for Legacy Software 15-SP1

SUSE Linux Enterprise Module for Legacy Software 15

https://www.suse.com/security/cve/CVE-2019-4732.html

https://www.suse.com/security/cve/CVE-2020-2583.html

https://www.suse.com/security/cve/CVE-2020-2593.html

https://www.suse.com/security/cve/CVE-2020-2604.html

https://www.suse.com/security/cve/CVE-2020-2659.html

https://bugzilla.suse.com/1160968

https://bugzilla.suse.com/1162972

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:0466-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here