Security update for java-1_8_0-openjdk
Announcement ID: | SUSE-SU-2019:0058-1 |
---|---|
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves nine vulnerabilities can now be installed.
Description:
This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:
Security issues fixed:
- CVE-2018-3136: Manifest better support (bsc#1112142)
- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
- CVE-2018-3169: Improve field accesses (bsc#1112146)
- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
- CVE-2018-3214: Better RIFF reading support (bsc#1112152)
- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
- CVE-2018-3183: Improve script engine support (bsc#1112148)
- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
Legacy Module 15
zypper in -t patch SUSE-SLE-Module-Legacy-15-2019-58=1
-
SUSE Package Hub 15
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-2019-58=1
Package List:
-
Legacy Module 15 (aarch64 ppc64le s390x x86_64)
- java-1_8_0-openjdk-debugsource-1.8.0.191-3.13.1
- java-1_8_0-openjdk-devel-1.8.0.191-3.13.1
- java-1_8_0-openjdk-headless-debuginfo-1.8.0.191-3.13.1
- java-1_8_0-openjdk-devel-debuginfo-1.8.0.191-3.13.1
- java-1_8_0-openjdk-headless-1.8.0.191-3.13.1
- java-1_8_0-openjdk-1.8.0.191-3.13.1
- java-1_8_0-openjdk-demo-debuginfo-1.8.0.191-3.13.1
- java-1_8_0-openjdk-debuginfo-1.8.0.191-3.13.1
- java-1_8_0-openjdk-demo-1.8.0.191-3.13.1
-
SUSE Package Hub 15 (noarch)
- java-1_8_0-openjdk-javadoc-1.8.0.191-3.13.1
References:
- https://www.suse.com/security/cve/CVE-2018-13785.html
- https://www.suse.com/security/cve/CVE-2018-16435.html
- https://www.suse.com/security/cve/CVE-2018-3136.html
- https://www.suse.com/security/cve/CVE-2018-3139.html
- https://www.suse.com/security/cve/CVE-2018-3149.html
- https://www.suse.com/security/cve/CVE-2018-3169.html
- https://www.suse.com/security/cve/CVE-2018-3180.html
- https://www.suse.com/security/cve/CVE-2018-3183.html
- https://www.suse.com/security/cve/CVE-2018-3214.html
- https://bugzilla.suse.com/show_bug.cgi?id=1112142
- https://bugzilla.suse.com/show_bug.cgi?id=1112143
- https://bugzilla.suse.com/show_bug.cgi?id=1112144
- https://bugzilla.suse.com/show_bug.cgi?id=1112146
- https://bugzilla.suse.com/show_bug.cgi?id=1112147
- https://bugzilla.suse.com/show_bug.cgi?id=1112148
- https://bugzilla.suse.com/show_bug.cgi?id=1112152
- https://bugzilla.suse.com/show_bug.cgi?id=1112153