SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-2019-58

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-2019-58

Security update for java-1_8_0-openjdk

Type: security

Severity: important

Issued: 2019-01-10

Description:

This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:

Security issues fixed:

- CVE-2018-3136: Manifest better support (bsc#1112142)
- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
- CVE-2018-3169: Improve field accesses (bsc#1112146)
- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
- CVE-2018-3214: Better RIFF reading support (bsc#1112152)
- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
- CVE-2018-3183: Improve script engine support (bsc#1112148)
- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile

References

CVE: CVE-2018-3214
CVE: CVE-2018-3183
CVE: CVE-2018-3180
CVE: CVE-2018-3169
CVE: CVE-2018-3149
CVE: CVE-2018-3139
CVE: CVE-2018-3136
CVE: CVE-2018-16435
CVE: CVE-2018-13785
Bugzilla: 1112153 VUL-0: CVE-2018-13785: java-1_7_0-openjdk, java-1_8_0-openjdk: Unspecified vulnerability in subcomponent: Deployment (libpng)
Bugzilla: 1112152 VUL-0: CVE-2018-3214: java-1_7_0-openjdk, java-1_8_0-openjdk: Unspecified vulnerability in subcomponent: Sound
Bugzilla: 1112148 VUL-0: CVE-2018-3183: java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Scripting
Bugzilla: 1112147 VUL-0: CVE-2018-3180: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: JSSE
Bugzilla: 1112146 VUL-0: CVE-2018-3169: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Hotspot
Bugzilla: 1112144 VUL-0: CVE-2018-3149: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: JNDI
Bugzilla: 1112143 VUL-0: CVE-2018-3139: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Networking
Bugzilla: 1112142 VUL-0: CVE-2018-3136: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Security

Packages

java-1_8_0-openjdk-1.8.0.191-3.13.1