SUSE-SU-2018:1938-2

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1938-2.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2018:1938-2
Related
  • CVE-2018-2790
  • CVE-2018-2794
  • CVE-2018-2795
  • CVE-2018-2796
  • CVE-2018-2797
  • CVE-2018-2798
  • CVE-2018-2799
  • CVE-2018-2800
  • CVE-2018-2814
  • CVE-2018-2815
Published
2018-07-12T09:04:27Z
Modified
2018-07-12T09:04:27Z
Summary
Security update for java-1_8_0-openjdk
Details

This update for java-180-openjdk to version 8u171 fixes the following issues:

These security issues were fixed:

  • S8180881: Better packaging of deserialization
  • S8182362: Update CipherOutputStream Usage
  • S8183032: Upgrade to LittleCMS 2.9
  • S8189123: More consistent classloading
  • S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest entries
  • S8189977, CVE-2018-2795, bsc#1090025: Improve permission portability
  • S8189981, CVE-2018-2796, bsc#1090026: Improve queuing portability
  • S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data portability
  • S8189989, CVE-2018-2798, bsc#1090028: Improve container portability
  • S8189993, CVE-2018-2799, bsc#1090029: Improve document portability
  • S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore mechanisms
  • S8190478: Improved interface method selection
  • S8190877: Better handling of abstract classes
  • S8191696: Better mouse positioning
  • S8192025, CVE-2018-2814, bsc#1090032: Less referential references
  • S8192030: Better MTSchema support
  • S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes implementation
  • S8193409: Improve AES supporting classes
  • S8193414: Improvements in MethodType lookups
  • S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection support

For other changes please consult the changelog.

References

Affected packages

SUSE:Linux Enterprise Module for Legacy 15 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-3.3.2

Ecosystem specific 

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-3.3.2",
            "java-1_8_0-openjdk": "1.8.0.171-3.3.2",
            "java-1_8_0-openjdk-devel": "1.8.0.171-3.3.2",
            "java-1_8_0-openjdk-headless": "1.8.0.171-3.3.2"
        }
    ]
}