File _patchinfo of Package patchinfo.17674

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.17674

<patchinfo incident="17674">
  <issue tracker="bnc" id="1180063">VUL-0: IBM Java October 2020 release</issue>
  <issue tracker="bnc" id="1177943">VUL-0: java-1_7_0-openjdk,java-1_8_0-openjdk,java-11-openjdk: Oracle October 2020 CPU</issue>
  <issue tracker="cve" id="2020-14779"/>
  <issue tracker="cve" id="2020-14798"/>
  <issue tracker="cve" id="2020-14796"/>
  <issue tracker="cve" id="2020-14792"/>
  <issue tracker="cve" id="2020-14782"/>
  <issue tracker="cve" id="2020-14803"/>
  <issue tracker="cve" id="2020-14781"/>
  <issue tracker="cve" id="2020-14797"/>
  <packager>pmonrealgonzalez</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for java-1_7_1-ibm</summary>
  <description>This update for java-1_7_1-ibm fixes the following issues:

- Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781
  CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class Libraries:
    - Z/OS specific C function send_file is changing the file pointer position
  * Security:
    - Add the new oracle signer certificate
    - Certificate parsing error
    - JVM memory growth can be caused by the IBMPKCS11IMPL crypto provider
    - Remove check for websphere signed jars
    - sessionid.hashcode generates too many collisions
    - The Java 8 IBM certpath provider does not honor the user
      specified system property for CLR connect timeout
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.17674

Places