SUSE-SU-2020:0628-1

Details

Description of the patch:

This update for java-1_7_0-openjdk fixes the following issues:

Update java-1_7_0-openjdk to version jdk7u251 (January 2020 CPU, bsc#1160968):

CVE-2020-2583: Unlink Set of LinkedHashSets
CVE-2020-2590: Improve Kerberos interop capabilities
CVE-2020-2593: Normalize normalization for all
CVE-2020-2601: Better Ticket Granting Services
CVE-2020-2604: Better serial filter handling
CVE-2020-2659: Enhance datagram socket support
CVE-2020-2654: Improve Object Identifier Processing

Affected Packages

java-1_7_0-openjdk

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.7.0.251-43.35.1

java-1_7_0-openjdk-demo

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

1.7.0.251-43.35.1

java-1_7_0-openjdk-devel

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCL

Fixed in:

1.7.0.251-43.35.1

java-1_7_0-openjdk-headless

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.7.0.251-43.35.1

References

ADVISORY

https://bugzilla.suse.com/1160968

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-March/006592.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-2583/

ADVISORY

https://www.suse.com/security/cve/CVE-2020-2590/

ADVISORY