File _patchinfo of Package patchinfo.6784

<patchinfo incident="6784">
  <issue id="1076366" tracker="bnc">VUL-0: java-1_7_0-openjdk,java-1_8_0-openjdk,java-1_9_0-openjdk: various security issues fixed in Oracle Jan 2018 CPU</issue>
  <issue id="2018-2579" tracker="cve" />
  <issue id="2018-2588" tracker="cve" />
  <issue id="2018-2599" tracker="cve" />
  <issue id="2018-2602" tracker="cve" />
  <issue id="2018-2603" tracker="cve" />
  <issue id="2018-2618" tracker="cve" />
  <issue id="2018-2629" tracker="cve" />
  <issue id="2018-2633" tracker="cve" />
  <issue id="2018-2634" tracker="cve" />
  <issue id="2018-2637" tracker="cve" />
  <issue id="2018-2641" tracker="cve" />
  <issue id="2018-2663" tracker="cve" />
  <issue id="2018-2677" tracker="cve" />
  <issue id="2018-2678" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>fstrba</packager>
  <description>This update for java-1_7_0-openjdk fixes the following issues:

Security issues fixed in OpenJDK 7u171 (January 2018 CPU)(bsc#1076366):

- CVE-2018-2579: Improve key keying case
- CVE-2018-2588: Improve LDAP logins
- CVE-2018-2599: Improve reliability of DNS lookups
- CVE-2018-2602: Improve usage messages
- CVE-2018-2603: Improve PKCS usage
- CVE-2018-2618: Stricter key generation
- CVE-2018-2629: Improve GSS handling
- CVE-2018-2633: Improve LDAP lookup robustness
- CVE-2018-2634: Improve property negotiations
- CVE-2018-2637: Improve JMX supportive features
- CVE-2018-2641: Improve GTK initialization
- CVE-2018-2663: More refactoring for deserialization cases
- CVE-2018-2677: More refactoring for client deserialization cases
- CVE-2018-2678: More refactoring for naming
</description>
  <summary>Security update for java-1_7_0-openjdk</summary>
</patchinfo>