SUSE-SU-2020:3159-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20203159-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3159-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:3159-1

Related

Published

2020-11-05T09:33:03Z

Modified

2020-11-05T09:33:03Z

Summary

Security update for java-11-openjdk

Details

This update for java-11-openjdk fixes the following issues:

Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943)
- New features
  - JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
- Security fixes
  - JDK-8233624: Enhance JNI linkage
  - JDK-8236196: Improve string pooling
  - JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
  - JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
  - JDK-8237995, CVE-2020-14782: Enhance certificate processing
  - JDK-8240124: Better VM Interning
  - JDK-8241114, CVE-2020-14792: Better range handling
  - JDK-8242680, CVE-2020-14796: Improved URI Support
  - JDK-8242685, CVE-2020-14797: Better Path Validation
  - JDK-8242695, CVE-2020-14798: Enhanced buffer support
  - JDK-8243302: Advanced class supports
  - JDK-8244136, CVE-2020-14803: Improved Buffer supports
  - JDK-8244479: Further constrain certificates
  - JDK-8244955: Additional Fix for JDK-8240124
  - JDK-8245407: Enhance zoning of times
  - JDK-8245412: Better class definitions
  - JDK-8245417: Improve certificate chain handling
  - JDK-8248574: Improve jpeg processing
  - JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
  - JDK-8253019: Enhanced JPEG decoding
- Other changes
  - JDK-6532025: GIF reader throws misleading exception with truncated images
  - JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/ /PDialogTest.java needs update by removing an infinite loop
  - JDK-8022535: [TEST BUG] javax/swing/text/html/parser/ /Test8017492.java fails
  - JDK-8062947: Fix exception message to correctly represent LDAP connection failure
  - JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
  - JDK-8134599: TESTBUG: java/rmi/transport/closeServerSocket/ /CloseServerSocket.java fails intermittently with Address already in use
  - JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create threaddb agent!
  - JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful
  - JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout
  - JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2
  - JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC
  - JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
  - JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ /ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code
  - JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3
  - JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
  - JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests
  - JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds
  - JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout
  - JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4
  - JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
  - JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test
  - JDK-8211694: JShell: Redeclared variable should be reset
  - JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent
  - JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest
  - JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
    - unexpected. lastLine=52, minLine=52, maxLine=55
  - JDK-8212807: tools/jar/multiRelease/Basic.java times out
  - JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent)
  - JDK-8213214: Set -Djava.io.tmpdir= when running tests
  - JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found
  - JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes
  - JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface
  - JDK-8214074: Ghash optimization using AVX instructions
  - JDK-8214491: Upgrade to JLine 3.9.0
  - JDK-8214797: TestJmapCoreMetaspace.java timed out
  - JDK-8215243: JShell tests failing intermitently with 'Problem cleaning up the following threads:'
  - JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed
  - JDK-8215354: x8632 build failures after JDK-8214074 (Ghash optimization using AVX instructions)
  - JDK-8219712: codesize2 (defined in stubroutinesx86.hpp) is too small on new Skylake CPUs
  - JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs
  - JDK-8221658: aarch64: add necessary predicate for ubfx patterns
  - JDK-8221759: Crash when completing 'java.io.File.path'
  - JDK-8221918: runtime/SharedArchiveFile/serviceability/ /ReplaceCriticalClasses.java fails: Shared archive not found
  - JDK-8222074: Enhance auto vectorization for x86
  - JDK-8222079: Don't use memset to initialize fields decodeenv constructor in disassembler.cpp
  - JDK-8223777: In posixspawn mode, failing to exec() jspawnhelper does not result in an error
  - JDK-8223940: Private key not supported by chosen signature algorithm
  - JDK-8224184: jshell got IOException at exiting with AIX
  - JDK-8224234: compiler/codegen/TestCharVect2.java fails in testmulc
  - JDK-8229378: jdwp library loader in linkermd.c quietly truncates on buffer overflow
  - JDK-8229815: Upgrade Jline to 3.12.1
  - JDK-8230000: some httpclients testng tests run zero test
  - JDK-8230002: javax/xml/jaxp/unittest/transform/ /SecureProcessingTest.java runs zero test
  - JDK-8230010: Remove jdk8037819/BasicTest1.java
  - JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter
  - JDK-8230402: Allocation of compile task fails with assert: 'Leaking compilation tasks?'
  - JDK-8230767: FlightRecorderListener returns null recording
  - JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java
  - JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
  - JDK-8231586: enlarge encoding space for OopMapValue offsets
  - JDK-8231953: Wrong assumption in assertion in oop::registeroop
  - JDK-8233027: OopMapSet::alldo does oms.next() twice during iteration
  - JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
  - JDK-8233386: Initialize NULL fields for unused decorations
  - JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
  - JDK-8233686: XML transformer uses excessive amount of memory
  - JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions
  - JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment
  - JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
  - JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
  - JDK-8234058: runtime/CompressedOops/ /CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr
  - JDK-8234149: Several regression tests do not dispose Frame at end
  - JDK-8234347: 'Turkey' meta time zone does not generate composed localized names
  - JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/ /bug6980209.java fails in linux nightly
  - JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILDCC
  - JDK-8236464: SOLINGER option is ignored by SSLSocket in JDK 11
  - JDK-8236548: Localized time zone name inconsistency between English and other locales
  - JDK-8236617: jtreg test containers/docker/ /TestMemoryAwareness.java fails after 8226575
  - JDK-8237182: Update copyright header for shenandoah and epsilon files
  - JDK-8237888: security/infra/java/security/cert/ /CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval
  - JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java
  - JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
  - JDK-8238284: [macos] Zero VM build fails due to an obvious typo
  - JDK-8238380: java.base/unix/native/libjava/childproc.c 'multiple definition' link errors with GCC10
  - JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c 'multiple definition' link errors with GCC10
  - JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link errors with GCC10
  - JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
  - JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code
  - JDK-8239083: C1 assert(knownholder == NULL || (knownholder->isinstanceklass() && (!knownholder->isinterface() || ((ciInstanceKlass)knownholder)->hasnonstaticconcretemethods())), 'should be non-static concrete method');
  - JDK-8241138: http.nonProxyHosts= causes StringIndexOutOfBoundsException in DefaultProxySelector
  - JDK-8241319: WBGetCodeBlob doesn't have ResourceMark
  - JDK-8241750: x8632 build failure after JDK-8227269
  - JDK-8242184: CRL generation error with RSASSA-PSS
  - JDK-8242283: Can't start JVM when java home path includes non-ASCII character
  - JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array
  - JDK-8243029: Rewrite javax/net/ssl/compatibility/ /Compatibility.java with a flexible interop test framework
  - JDK-8243138: Enhance BaseLdapServer to support starttls extended request
  - JDK-8243320: Add SSL root certificates to Oracle Root CA program
  - JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program
  - JDK-8243389: enhance os::pdprintcpuinfo on linux
  - JDK-8244196: adjust output in oslinux
  - JDK-8244225: stringop-overflow warning on strncpy call from compiletheworldin
  - JDK-8249251: [darkmode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel
  - JDK-8249255: Build fails if source code in cygwin home dir
  - JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11
  - JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList
  - JDK-8249560: Shenandoah: Fix racy GC request handling
  - JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
  - JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases
  - JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
  - JDK-8250609: C2 crash in IfNode::foldcompares
  - JDK-8253134: JMMVERSION should remain at 0x20020000 (JDK 10) in JDK 11
  - JDK-8253283: [11u] Test build/translations/ /VerifyTranslations.java failing after JDK-8252258
  - JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes
  - Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)' introduced in jdk 11.0.9

References

Affected packages

SUSE:Linux Enterprise Server 12 SP5 / java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11.0.9.0-3.15.1

Ecosystem specific

{
    "binaries": [
        {
            "java-11-openjdk-demo": "11.0.9.0-3.15.1",
            "java-11-openjdk": "11.0.9.0-3.15.1",
            "java-11-openjdk-devel": "11.0.9.0-3.15.1",
            "java-11-openjdk-headless": "11.0.9.0-3.15.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11.0.9.0-3.15.1

Ecosystem specific

{
    "binaries": [
        {
            "java-11-openjdk-demo": "11.0.9.0-3.15.1",
            "java-11-openjdk": "11.0.9.0-3.15.1",
            "java-11-openjdk-devel": "11.0.9.0-3.15.1",
            "java-11-openjdk-headless": "11.0.9.0-3.15.1"
        }
    ]
}