SUSE-SU-2020:0231-1

Details

Description of the patch:

This update for java-1_8_0-openjdk fixes the following issues:

Update java-1_8_0-openjdk to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968):

CVE-2020-2583: Unlink Set of LinkedHashSets
CVE-2020-2590: Improve Kerberos interop capabilities
CVE-2020-2593: Normalize normalization for all
CVE-2020-2601: Better Ticket Granting Services
CVE-2020-2604: Better serial filter handling
CVE-2020-2659: Enhance datagram socket support
CVE-2020-2654: Improve Object Identifier Processing

Affected Packages

java-1_8_0-openjdk

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0.242-3.30.2

java-1_8_0-openjdk-demo

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0.242-3.30.2

java-1_8_0-openjdk-devel

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0.242-3.30.2

java-1_8_0-openjdk-headless

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0.242-3.30.2

java-1_8_0-openjdk-javadoc

SUSE Linux Enterprise Module for Package Hub 15

Fixed in:

1.8.0.242-3.30.2

References

ADVISORY

https://bugzilla.suse.com/1160968

ADVISORY

https://www.suse.com/security/cve/CVE-2020-2583/

ADVISORY