SUSE-SU-2020:0466-1

Details

This update for java-1_8_0-ibm fixes the following issues:

Java 8.0 was updated to Service Refresh 6 Fix Pack 5 (bsc#1162972, bsc#1160968)

CVE-2020-2583: Unlink Set of LinkedHashSets
CVE-2019-4732: Untrusted DLL search path vulnerability
CVE-2020-2593: Normalize normalization for all
CVE-2020-2604: Better serial filter handling
CVE-2020-2659: Enhance datagram socket support

Affected Packages

java-1_8_0-ibm

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0_sr6.5-3.33.2

java-1_8_0-ibm-alsa

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0_sr6.5-3.33.2

java-1_8_0-ibm-devel

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0_sr6.5-3.33.2

java-1_8_0-ibm-plugin

SUSE Linux Enterprise Module for Legacy 15SUSE Linux Enterprise Module for Legacy 15 SP1SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

1.8.0_sr6.5-3.33.2

References

REPORT

https://bugzilla.suse.com/1160968

REPORT

https://bugzilla.suse.com/1162972

WEB

https://www.suse.com/security/cve/CVE-2019-4732

WEB

https://www.suse.com/security/cve/CVE-2020-2583

WEB

https://www.suse.com/security/cve/CVE-2020-2593

WEB

https://www.suse.com/security/cve/CVE-2020-2604

WEB

https://www.suse.com/security/cve/CVE-2020-2659

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20200466-1/