kritisch
SUSE-SU-2021:0652-1
Security update for java-1_8_0-ibm
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 25 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. * CVE-2020-14803: Unauthenticated attacker with network access via multiple protocols allows to compromise Java SE.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | java-1_8_0-ibm, java-1_8_0-ibm-alsa, java-1_8_0-ibm-devel und 1 weitere | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-ibm, java-1_8_0-ibm-alsa, java-1_8_0-ibm-devel und 1 weitere | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-ibm, java-1_8_0-ibm-alsa, java-1_8_0-ibm-devel und 1 weitere | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.5 | java-1_8_0-ibm, java-1_8_0-ibm-alsa, java-1_8_0-ibm-devel und 1 weitere | 1.8.0_sr6.25-30.81.1 |
Alle 16 Einträge aus 4 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-ibm-alsa | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-ibm-devel | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.2 | java-1_8_0-ibm-plugin | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-ibm-alsa | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-ibm-devel | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.3 | java-1_8_0-ibm-plugin | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-ibm-alsa | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-ibm-devel | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.4 | java-1_8_0-ibm-plugin | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.5 | java-1_8_0-ibm | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.5 | java-1_8_0-ibm-alsa | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.5 | java-1_8_0-ibm-devel | 1.8.0_sr6.25-30.81.1 |
| SUSE Linux Enterprise 12.5 | java-1_8_0-ibm-plugin | 1.8.0_sr6.25-30.81.1 |
Referenzen
- https://bugzilla.suse.com/1181239
- https://bugzilla.suse.com/1182186
- https://lists.suse.com/pipermail/sle-security-updates/2021-February/008394.html
- https://www.suse.com/security/cve/CVE-2020-14803/
- https://www.suse.com/security/cve/CVE-2020-27221/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20210652-1/