This update for java-1_7_1-ibm fixes the following issues:
Java was updated to 7.1 Service Refresh 4 Fix Pack 60 [bsc#1162972, bsc#1160968].
Security issues fixed:
- CVE-2020-2583: Fixed a serialization vulnerability in BeanContextSupport (bsc#1162972).
- CVE-2020-2593: Fixed an incorrect check in isBuiltinStreamHandler, causing URL normalization issues (bsc#1162972).
- CVE-2020-2604: Fixed a serialization issue in jdk.serialFilter (bsc#1162972).
- CVE-2020-2659: Fixed the incomplete enforcement of the maxDatagramSockets limit in DatagramChannelImpl (bsc#1162972).
Non-security issues fixed:
- Class Libraries:
IJ22333 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
WHEN TIMEOUT IS SET
IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
CHINESE EDITION OF WINDOWS CLIENT SYSTEM
IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
INCONSISTENT WITH CLDR
IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
- JIT Compiler:
IJ11368 JAVA JIT PPC: CRASH IN JIT COMPILED CODE ON PPC MACHINES