Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE: 2021:3007-1 Moderate: OpenJDK Fixes for Server Security

suse
Calendar Grey September 9, 2021
Scroller Suse
This Fedora patch addresses 4 vulnerabilities for python3 that improve overall system security.
An update that fixes 6 vulnerabilities is now available

Summary

This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.27 - OpenJDK 7u311 (July 2021 CPU) Security fixes: - CVE-2021-2341: Improve file transfers (bsc#1188564) - CVE-2021-2369: Better jar file validation (bsc#1188565) - CVE-2021-2432: Provide better LDAP provider support (bsc#1188568) - CVE-2021-2163: Enhance opening JARs (bsc#1185055) - CVE-2021-2161: Less ambiguous processing (bsc#1185056) - CVE-2018-3639: Fix revision to prefer Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-3007=1 Package List:

Topics%20covered

Topics Covered

security advisory moderate update SUSE java openjdk jar validation

References

#1185055 #1185056 #1188564 #1188565 #1188568

Cross- CVE-2018-3639 CVE-2021-2161 CVE-2021-2163

CVE-2021-2341 CVE-2021-2369 CVE-2021-2432

CVSS scores:

CVE-2018-3639 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2018-3639 (SUSE): 4.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

CVE-2021-2161 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CVE-2021-2161 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CVE-2021-2163 (NVD) : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

CVE-2021-2163 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

CVE-2021-2341 (NVD) : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CVE-2021-2341 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Announcement ID: SUSE-SU-2021:3007-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update SUSE java openjdk jar validation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.