SUSE-SU-2016:1997-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2016/suse-su-20161997-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1997-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:1997-1

Related

CVE-2016-3458
CVE-2016-3485
CVE-2016-3498
CVE-2016-3500
CVE-2016-3503
CVE-2016-3508
CVE-2016-3511
CVE-2016-3550
CVE-2016-3598
CVE-2016-3606
CVE-2016-3610

Published

2016-08-09T11:33:08Z

Modified

2016-08-09T11:33:08Z

Summary

Security update for java-1_7_0-openjdk

Details

This update for java-170-openjdk fixes the following issues:

Update to 2.6.7 - OpenJDK 7u111
- Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows only) (bsc#989734)
  - S8147771: Construction of static protection domains under Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149962, CVE-2016-3508: Better delineation of XML processing (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8155981, CVE-2016-3606: Bolster bytecode verification (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation (bsc#989725)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
- Import of OpenJDK 7 u111 build 0
  - S6953295: Move few sun.security.{util, x509, pkcs} classes used by keytool/jarsigner to another package
  - S7060849: Eliminate pack200 build warnings
  - S7064075: Security libraries don't build with javac -Xlint:all,-deprecation -Werror
  - S7069870: Parts of the JDK erroneously rely on generic array initializers with diamond
  - S7102686: Restructure timestamp code so that jars and modules can more easily share the same code
  - S7105780: Add SSLSocket client/SSLEngine server to templates directory
  - S7142339: PKCS7.java is needlessly creating SHA1PRNG SecureRandom instances when timestamping is not done
  - S7152582: PKCS11 tests should use the NSS libraries available in the OS
  - S7192202: Make sure keytool prints both unknown and unparseable extensions
  - S7194449: String resources for Key Tool and Policy Tool should be in their respective packages
  - S7196855: autotest.sh fails on ubuntu because libsoftokn.so not found
  - S7200682: TESTBUG: keytool/autotest.sh still has problems with libsoftokn.so
- Backports
  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for Javaawt test suit
  - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java fails with ClassCastException
  - S8069181, PR3012, RH1015612: java.lang.AssertionError when compiling JDK 1.4 code in JDK 8
  - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3075: Partially initialized string object created by C2's string concat optimization may escape
- Bug fixes
  - PR2799, RH1195203: Files are missing from resources.jar
  - PR2900: Don't use WithSeed versions of NSS functions as they don't fully process the seed
  - PR3091: SystemTap is heavily confused by multiple JDKs
  - PR3102: Extend 8022594 to AixPollPort
  - PR3103: Handle case in clean-fonts where linux.fontconfig.Gentoo.properties.old has not been created
  - PR3111: Provide option to disable SystemTap tests
  - PR3114: Don't assume system mime.types supports text/x-java-source
  - PR3115: Add check for elliptic curve cryptography implementation
  - PR3116: Add tests for Java debug info and source files
  - PR3118: Path to agpl-3.0.txt not updated
  - PR3119: Makefile handles cacerts as a symlink, but the configure check doesn't
- AArch64 port
  - S8148328, PR3100: aarch64: redundant lsr instructions in stub code.
  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3100: aarch64: generatecopylongs calls align() incorrectly
  - S8150045, PR3100: arraycopy causes segfaults in SATB during garbage collection
  - S8154537, PR3100: AArch64: some integer rotate instructions are never emitted
  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads in wrong mode
  - S8157906, PR3100: aarch64: some more integer rotate instructions are never emitted
Enable SunEC for SLE12 and Leap (bsc#982366)
Fix aarch64 running with 48 bits va space (bsc#984684)

References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 / java-1_7_0-openjdk

Package

Name: java-1_7_0-openjdk
Purl: pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.0.111-33.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_7_0-openjdk-headless": "1.7.0.111-33.1",
            "java-1_7_0-openjdk": "1.7.0.111-33.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1 / java-1_7_0-openjdk

Package

Name: java-1_7_0-openjdk
Purl: pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.0.111-33.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_7_0-openjdk-demo": "1.7.0.111-33.1",
            "java-1_7_0-openjdk-headless": "1.7.0.111-33.1",
            "java-1_7_0-openjdk-devel": "1.7.0.111-33.1",
            "java-1_7_0-openjdk": "1.7.0.111-33.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / java-1_7_0-openjdk

Package

Name: java-1_7_0-openjdk
Purl: pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.0.111-33.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_7_0-openjdk-demo": "1.7.0.111-33.1",
            "java-1_7_0-openjdk-headless": "1.7.0.111-33.1",
            "java-1_7_0-openjdk-devel": "1.7.0.111-33.1",
            "java-1_7_0-openjdk": "1.7.0.111-33.1"
        }
    ]
}