SUSE-SU-2019:0057-1
Security update for java-1_8_0-openjdk
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#1112144) - CVE-2018-3169: Improve field accesses (bsc#1112146) - CVE-2018-3180: Improve TLS connections stability (bsc#1112147) - CVE-2018-3214: Better RIFF reading support (bsc#1112152) - CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153) - CVE-2018-3183: Improve script engine support (bsc#1112148) - CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.1 | java-1_8_0-openjdk, java-1_8_0-openjdk-demo, java-1_8_0-openjdk-devel und 1 weitere | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-openjdk, java-1_8_0-openjdk-demo, java-1_8_0-openjdk-devel und 1 weitere | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-openjdk, java-1_8_0-openjdk-demo, java-1_8_0-openjdk-devel und 1 weitere | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-openjdk, java-1_8_0-openjdk-demo, java-1_8_0-openjdk-devel und 1 weitere | 1.8.0.191-27.29.1 |
Alle 16 Einträge aus 4 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.1 | java-1_8_0-openjdk | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.1 | java-1_8_0-openjdk-demo | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.1 | java-1_8_0-openjdk-devel | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.1 | java-1_8_0-openjdk-headless | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-openjdk | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-openjdk-demo | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-openjdk-devel | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-openjdk-headless | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-openjdk | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-openjdk-demo | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-openjdk-devel | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-openjdk-headless | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-openjdk | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-openjdk-demo | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-openjdk-devel | 1.8.0.191-27.29.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-openjdk-headless | 1.8.0.191-27.29.1 |
Referenzen
- https://bugzilla.suse.com/1112142
- https://bugzilla.suse.com/1112143
- https://bugzilla.suse.com/1112144
- https://bugzilla.suse.com/1112146
- https://bugzilla.suse.com/1112147
- https://bugzilla.suse.com/1112148
- https://bugzilla.suse.com/1112152
- https://bugzilla.suse.com/1112153
Alle 20 Referenzen
- https://lists.suse.com/pipermail/sle-security-updates/2019-January/005026.html
- https://www.suse.com/security/cve/CVE-2018-13785/
- https://www.suse.com/security/cve/CVE-2018-16435/
- https://www.suse.com/security/cve/CVE-2018-3136/
- https://www.suse.com/security/cve/CVE-2018-3139/
- https://www.suse.com/security/cve/CVE-2018-3149/
- https://www.suse.com/security/cve/CVE-2018-3169/
- https://www.suse.com/security/cve/CVE-2018-3180/
- https://www.suse.com/security/cve/CVE-2018-3183/
- https://www.suse.com/security/cve/CVE-2018-3214/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2019/suse-su-20190057-1/