SUSE-SU-2016:2012-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2016/suse-su-20162012-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2012-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:2012-1

Related

CVE-2016-3458
CVE-2016-3485
CVE-2016-3498
CVE-2016-3500
CVE-2016-3503
CVE-2016-3508
CVE-2016-3511
CVE-2016-3550
CVE-2016-3552
CVE-2016-3587
CVE-2016-3598
CVE-2016-3606
CVE-2016-3610

Published

2016-08-09T11:33:15Z

Modified

2016-08-09T11:33:15Z

Summary

Security update for java-1_8_0-openjdk

Details

This update for java-180-openjdk fixes the following issues:

Upgrade to version jdk8u101 (icedtea 3.1.0)
New in release 3.1.0 (2016-07-25):
- Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
- New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3 on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x8664
- Import of OpenJDK 8 u92 build 14
  - S8143963: improve ClassLoader::traceclasspath to accept an additional outputStream arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to int32
  - S8144483: One long Safepoint pause directly after each GC log rotation
  - S8144487: PhaseIdealLoop::buildandoptimize() must restore majorprogress flag if skiploopopts is true
- Backports
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLDNOLOAD incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be built with GCC 6
- Bug fixes
  - PR1958: GTKLookAndFeel does not honor gtk-alternative-button-order
  - PR2822: Feed LIBS & CFLAGS into configure rather than make to avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and 6894807
  - PR3083, RH1346460: Regression in SSL debug output without an ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property 'enableCustomValueHandler' introduced by S8079718 and typo version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
- AArch64 port
  - S8145320, PR3078: Create unsafearraycopy and genericarraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generatecopylongs calls align() incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions in callstub
  - S8154739, PR3078: AArch64: TemplateTable::fastxaccess loads in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation code
  - S8155100, PR3078: AArch64: Relax alignment requirement for bytemapbase
  - S8155612, PR3078: Aarch64: vector nodes need to support misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails due to genericarraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in pddisjointwords and pdconjointwords
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
Fix script linking /usr/share/javazi/tzdb.dat for platform where it applies (bsc#987895)
Fix aarch64 running with 48 bits va space (bsc#984684)

avoid some crashes

References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.101-14.3

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk": "1.8.0.101-14.3",
            "java-1_8_0-openjdk-headless": "1.8.0.101-14.3"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.101-14.3

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.101-14.3",
            "java-1_8_0-openjdk": "1.8.0.101-14.3",
            "java-1_8_0-openjdk-devel": "1.8.0.101-14.3",
            "java-1_8_0-openjdk-headless": "1.8.0.101-14.3"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.101-14.3

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.101-14.3",
            "java-1_8_0-openjdk": "1.8.0.101-14.3",
            "java-1_8_0-openjdk-devel": "1.8.0.101-14.3",
            "java-1_8_0-openjdk-headless": "1.8.0.101-14.3"
        }
    ]
}