Oval Definition:oval:org.opensuse.security:def:55976
Revision Date:2021-11-24Version:1
Title:Security update for java-1_7_0-openjdk (Important)
Description:

This update for java-1_7_0-openjdk fixes the following issues:



Update to OpenJDK 7u321 (October 2021 CPU):

- CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910). - CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911). - CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912). - CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore (bsc#1191913). - CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909). - CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914). - CVE-2021-35588: Fixed incomplete validation of inner class references in ClassFileParser (bsc#1191905) - CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906).
Family:unixClass:patch
Status:Reference(s):1015565
1020102
1037824
1052311
1052365
1053153
1069708
1109105
1111479
1111480
1112229
1115034
1117022
1117274
1117313
1117327
1117331
1120644
1122191
1142772
1145692
1154862
1191901
1191905
1191906
1191909
1191910
1191911
1191912
1191913
1191914
792432
813026
819204
825935
833483
839653
839663
840997
842417
846849
848014
848657
849665
849667
849668
851386
855809
869663
920057
934920
948516
948686
952849
953110
954872
958963
959094
960155
960305
961173
964465
CVE-2013-1682
CVE-2013-1684
CVE-2013-1685
CVE-2013-1686
CVE-2013-1687
CVE-2013-1690
CVE-2013-1692
CVE-2013-1693
CVE-2013-1697
CVE-2013-1922
CVE-2013-2007
CVE-2013-4375
CVE-2013-4416
CVE-2013-4494
CVE-2013-4551
CVE-2013-4553
CVE-2013-4554
CVE-2013-6441
CVE-2014-3591
CVE-2014-7300
CVE-2015-0837
CVE-2015-3238
CVE-2015-5313
CVE-2015-5313
CVE-2015-7552
CVE-2017-0381
CVE-2017-1000111
CVE-2017-1000112
CVE-2017-10661
CVE-2017-16939
CVE-2018-17183
CVE-2018-17961
CVE-2018-18073
CVE-2018-18284
CVE-2018-19409
CVE-2018-19475
CVE-2018-19476
CVE-2018-19477
CVE-2018-20406
CVE-2019-1010180
CVE-2019-17498
CVE-2019-5010
CVE-2021-35550
CVE-2021-35556
CVE-2021-35559
CVE-2021-35561
CVE-2021-35564
CVE-2021-35565
CVE-2021-35586
CVE-2021-35588
CVE-2021-35603
SUSE-SU-2015:1626-1
SUSE-SU-2016:0225-1
SUSE-SU-2016:0923-1
SUSE-SU-2016:0931-1
SUSE-SU-2017:0436-1
SUSE-SU-2017:1398-1
SUSE-SU-2017:2150-1
SUSE-SU-2017:3336-1
SUSE-SU-2018:4090-1
SUSE-SU-2019:0243-1
SUSE-SU-2019:2914-1
SUSE-SU-2019:2936-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP2-LTSS-ERICSSON
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND libid3tag0-0.15.1b-lp150.3 is installed
  • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • MozillaThunderbird-60.7.2-lp151.2.7 is installed
  • OR MozillaThunderbird-buildsymbols-60.7.2-lp151.2.7 is installed
  • OR MozillaThunderbird-translations-common-60.7.2-lp151.2.7 is installed
  • OR MozillaThunderbird-translations-other-60.7.2-lp151.2.7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • MozillaFirefox-17.0.7esr-0.8 is installed
  • OR MozillaFirefox-branding-SLED-7-0.12 is installed
  • OR MozillaFirefox-translations-17.0.7esr-0.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • libvirt-1.2.5-12 is installed
  • OR libvirt-client-1.2.5-12 is installed
  • OR libvirt-client-32bit-1.2.5-12 is installed
  • OR libvirt-doc-1.2.5-12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • libopus0-1.1-3 is installed
  • OR opus-1.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • gnome-settings-daemon-3.10.2-20 is installed
  • OR gnome-settings-daemon-lang-3.10.2-20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_48-default-6-2 is installed
  • OR kgraft-patch-3_12_74-60_64_48-xen-6-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_17-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • bind-9.9.9P1-46 is installed
  • OR bind-chrootenv-9.9.9P1-46 is installed
  • OR bind-doc-9.9.9P1-46 is installed
  • OR bind-libs-9.9.9P1-46 is installed
  • OR bind-libs-32bit-9.9.9P1-46 is installed
  • OR bind-utils-9.9.9P1-46 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND binutils-2.31-9.26 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • xen-4.7.6_02-43.36 is installed
  • OR xen-doc-html-4.7.6_02-43.36 is installed
  • OR xen-libs-4.7.6_02-43.36 is installed
  • OR xen-libs-32bit-4.7.6_02-43.36 is installed
  • OR xen-tools-4.7.6_02-43.36 is installed
  • OR xen-tools-domU-4.7.6_02-43.36 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND shadow-4.2.1-27.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libspice-client-glib-2_0-8-0.33-1 is installed
  • OR libspice-client-glib-helper-0.33-1 is installed
  • OR libspice-client-gtk-3_0-5-0.33-1 is installed
  • OR libspice-controller0-0.33-1 is installed
  • OR typelib-1_0-SpiceClientGlib-2_0-0.33-1 is installed
  • OR typelib-1_0-SpiceClientGtk-3_0-0.33-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND binutils-2.32-9.33 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND ucode-intel-20180807-13.29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bind-9.11.2-1 is installed
  • OR bind-chrootenv-9.11.2-1 is installed
  • OR bind-doc-9.11.2-1 is installed
  • OR bind-utils-9.11.2-1 is installed
  • OR libbind9-160-9.11.2-1 is installed
  • OR libdns169-9.11.2-1 is installed
  • OR libirs160-9.11.2-1 is installed
  • OR libisc166-9.11.2-1 is installed
  • OR libisc166-32bit-9.11.2-1 is installed
  • OR libisccc160-9.11.2-1 is installed
  • OR libisccfg160-9.11.2-1 is installed
  • OR liblwres160-9.11.2-1 is installed
  • OR python-bind-9.11.2-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • kernel-default-3.12.74-60.64.54 is installed
  • OR kernel-default-base-3.12.74-60.64.54 is installed
  • OR kernel-default-devel-3.12.74-60.64.54 is installed
  • OR kernel-devel-3.12.74-60.64.54 is installed
  • OR kernel-macros-3.12.74-60.64.54 is installed
  • OR kernel-source-3.12.74-60.64.54 is installed
  • OR kernel-syms-3.12.74-60.64.54 is installed
  • OR kernel-xen-3.12.74-60.64.54 is installed
  • OR kernel-xen-base-3.12.74-60.64.54 is installed
  • OR kernel-xen-devel-3.12.74-60.64.54 is installed
  • OR kgraft-patch-3_12_74-60_64_54-default-1-2 is installed
  • OR kgraft-patch-3_12_74-60_64_54-xen-1-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_19-1-2 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND python-tablib-0.9.11-3 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND nodejs6-6.14.4-11.18 is installed
  • BACK