Oval Definition:
oval:org.opensuse.security:def:65344
Revision Date
:
2020-12-01
Version
:
1
Title
:
Security update for java-1_8_0-openjdk (Important)
Description
:
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues:
Security issues fixed:
- CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729). - CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
Non-Security issue fixed:
- Disable LTO (bsc#1133135). - Added Japanese new era name.
Family
:
unix
Class
:
patch
Status
:
Reference(s)
:
1132728
1132729
1132732
1133135
1145093
CVE-2018-3639
CVE-2019-10222
CVE-2019-2602
CVE-2019-2684
CVE-2019-2698
SUSE-SU-2019:1211-2
SUSE-SU-2019:2247-1
Platform(s)
:
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s)
:
Definition Synopsis
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND
Package Information
java-1_8_0-openjdk-1.8.0.212-3.19 is installed
OR
java-1_8_0-openjdk-accessibility-1.8.0.212-3.19 is installed
OR
java-1_8_0-openjdk-javadoc-1.8.0.212-3.19 is installed
OR
java-1_8_0-openjdk-src-1.8.0.212-3.19 is installed
BACK