Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 443
Alerts This Week
Warning Icon 1 443

SUSE Linux Enterprise Server 12-SP5: Security Update for Java-11-OpenJDK

suse
Calendar Grey August 5, 2021
Dist Suse Esm H88
The recent update of Java 11 OpenJDK is crucial for SUSE Linux Enterprise Server 12-SP5, significantly improving security measures and overall performance.
An update that solves three vulnerabilities, contains one feature and has one errata is now available

Summary

This update for java-11-openjdk fixes the following issues: - Update to jdk-11.0.12+7 - CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. (bsc#1188566) - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-2613=1 Package List: - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): java-11-openjdk-11.0.12.0-3.27.2

Topics%20covered

Topics Covered

security advisory update software patch important security issues Java fix SUSE Linux Enterprise Server

References

#1185476 #1188564 #1188565 #1188566 SLE-5715

Cross- CVE-2021-2341 CVE-2021-2369 CVE-2021-2388

CVSS scores:

CVE-2021-2341 (NVD) : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2021-2341 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2021-2369 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVE-2021-2369 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVE-2021-2388 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-2388 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP5

https://www.suse.com/security/cve/CVE-2021-2341.html

https://www.suse.com/security/cve/CVE-2021-2369.html

https://www.suse.com/security/cve/CVE-2021-2388.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2613-1
Rating: important

Topics%20covered

Topics Covered

security advisory update software patch important security issues Java fix SUSE Linux Enterprise Server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.