Stay Secure with the Latest Linux Advisories

security advisoryimportantSUSE

SUSE: 2020:14287-1 Important: java-1_7_1-ibm Security Update

An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:14287-1 Rating: important References: #1160968 #1162972 Cross-References: CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659 Affected Products: SUSE Linux Enterprise Server 11-SP4-LTSS ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for java-1_7_1-ibm fixes the following issues: Java was updated to 7.1 Service Refresh 4 Fix Pack 60 [bsc#1162972, bsc#1160968]. Security issues fixed: - CVE-2020-2583: Fixed a serialization vulnerability in BeanContextSupport (bsc#1162972). - CVE-2020-2593: Fixed an incorrect check in isBuiltinStreamHandler, causing URL normalization issues (bsc#1162972). - CVE-2020-2604: Fixed a serialization issue in jdk.serialFilter (bsc#1162972). - CVE-2020-2659: Fixed the incomplete enforcement of the maxDatagramSockets limit in DatagramChannelImpl (bsc#1162972). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4-LTSS: zypper in -t patch slessp4-java-1_7_1-ibm-14287=1 Package List: - SUSE Linux Enterprise Server 11-SP4-LTSS (i586 ppc64 s390x x86_64): java-1_7_1-ibm-1.7.1_sr4.60-26.50.1 java-1_7_1-ibm-devel-1.7.1_sr4.60-26.50.1 java-1_7_1-ibm-jdbc-1.7.1_sr4.60-26.50.1 - SUSE Linux Enterprise Server 11-SP4-LTSS (i586 x86_64): java-1_7_1-ibm-alsa-1.7.1_sr4.60-26.50.1 java-1_7_1-ibm-plugin-1.7.1_sr4.60-26.50.1 References: https://www.suse.com/security/cve/CVE-2020-2583.html https://www.suse.com/security/cve/CVE-2020-2593.html https://www.suse.com/security/cve/CVE-2020-2604.html https://www.suse.com/security/cve/CVE-2020-2659.html https://bugzilla.suse.com/1160968 https://bugzilla.suse.com/1162972 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . Significant security patches have been implemented in java-1_7_1-ibm for SUSE Linux Enterprise Server. Details on vulnerabilities addressed are as follows.. SUSE Security Update, Java Issues, Service Refresh 4, Security Patch. . Severity: Important. LinuxSecurity.com Team

Feb 21, 2020 •Important SuSE