openSUSE Build Service

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:

Security issues fixed:

- CVE-2018-3136: Manifest better support (bsc#1112142)
- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
- CVE-2018-3169: Improve field accesses (bsc#1112146)
- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
- CVE-2018-3214: Better RIFF reading support (bsc#1112152)
- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
- CVE-2018-2938: Support Derby connections (bsc#1101644)
- CVE-2018-2940: Better stack walking (bsc#1101645)
- CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)
- CVE-2018-2973: Improve LDAP support (bsc#1101656)
- CVE-2018-3639 cpu speculative store bypass mitigation

This update was imported from the SUSE:SLE-12:Update update project.

Submitted by Fridrich Strba (fstrba)

Fixed bugs

bnc#1112147

VUL-0: CVE-2018-3180: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: JSSE

bnc#1112146

VUL-0: CVE-2018-3169: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Hotspot

bnc#1112144

VUL-0: CVE-2018-3149: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: JNDI

bnc#1112143

VUL-0: CVE-2018-3139: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Networking

bnc#1112142

VUL-0: CVE-2018-3136: java-1_7_0-openjdk, java-1_8_0-openjdk, java-11-openjdk: Unspecified vulnerability in subcomponent: Security

bnc#1112152

VUL-0: CVE-2018-3214: java-1_7_0-openjdk, java-1_8_0-openjdk: Unspecified vulnerability in subcomponent: Sound

bnc#1112153

VUL-0: CVE-2018-13785: java-1_7_0-openjdk, java-1_8_0-openjdk: Unspecified vulnerability in subcomponent: Deployment (libpng)

bnc#1101645

VUL-0: CVE-2018-2940: java-1_7_0-openjdk, java-1_8_0-openjdk, java-10-openjdk: Unspecified vulnerability in subcomponent Libraries

bnc#1101644

VUL-0: CVE-2018-2938: java-1_7_0-openjdk, java-1_8_0-openjdk: Unspecified vulnerability in subcomponent Java DB

bnc#1101656

VUL-0: CVE-2018-2973: java-1_7_0-openjdk, java-1_8_0-openjdk, java-10-openjdk: Unspecified vulnerability in subcomponent JSSE

bnc#1101651

VUL-0: CVE-2018-2952: java-1_7_0-openjdk, java-1_8_0-openjdk, java-10-openjdk: Unspecified vulnerability in subcomponent Concurrency

Places

Fixed bugs

Selected Binaries

Places