SUSE-SU-2019:1211-1

Details

Description of the patch:

This update for java-1_8_0-openjdk to version 8u212 fixes the following issues:

Security issues fixed:

CVE-2019-2602: Better String parsing (bsc#1132728).
CVE-2019-2684: More dynamic RMI interactions (bsc#1132732).
CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729).
CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE

Non-Security issue fixed:

Disable LTO (bsc#1133135).
Added Japanese new era name.

Affected Packages

java-1_8_0-openjdk

SUSE Linux Enterprise Module for Legacy 15

Fixed in:

1.8.0.212-3.19.1

java-1_8_0-openjdk-demo

SUSE Linux Enterprise Module for Legacy 15

Fixed in:

1.8.0.212-3.19.1

java-1_8_0-openjdk-devel

SUSE Linux Enterprise Module for Legacy 15

Fixed in:

1.8.0.212-3.19.1

java-1_8_0-openjdk-headless

SUSE Linux Enterprise Module for Legacy 15

Fixed in:

1.8.0.212-3.19.1

java-1_8_0-openjdk-javadoc

SUSE Linux Enterprise Module for Package Hub 15

Fixed in:

1.8.0.212-3.19.1

References

ADVISORY

https://bugzilla.suse.com/1132728

ADVISORY

https://bugzilla.suse.com/1132729

ADVISORY

https://bugzilla.suse.com/1132732

ADVISORY

https://bugzilla.suse.com/1133135

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-May/005437.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-3639/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-2602/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-2684/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-2698/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20191211-1/