SUSE-SU-2019:13978-1

LOW3.3

Security update for java-1_7_1-ibm

Published Mar 14, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for java-1_7_1-ibm to version 7.1.4.40 fixes the following issues:

Security issues fixed:

CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).
CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).

More information: https://developer.ibm.com/javasdk/support/security-vulnerabilities/#IBM_Security_Update_February_2019

Affected Packages

java-1_7_1-ibm-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

1.7.1_sr4.40-26.36.1

References

ADVISORY

https://bugzilla.suse.com/1122293

ADVISORY

https://bugzilla.suse.com/1122299

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-March/005193.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-11212/

ADVISORY