File _patchinfo of Package patchinfo.8318

<patchinfo incident="8318">
  <issue tracker="bnc" id="1087066">java-1_8_0-openjdk FTBFS with gcc8</issue>
  <issue tracker="bnc" id="1090023">VUL-0: CVE-2018-2790: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent Security</issue>
  <issue tracker="bnc" id="1090025">VUL-0: CVE-2018-2795: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent Security</issue>
  <issue tracker="bnc" id="1090024">VUL-0: CVE-2018-2794: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent Security</issue>
  <issue tracker="bnc" id="1090027">VUL-0: CVE-2018-2797: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent JMX</issue>
  <issue tracker="bnc" id="1090026">VUL-0: CVE-2018-2796: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent Concurrency</issue>
  <issue tracker="bnc" id="1090029">VUL-0: CVE-2018-2799: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent JAXP</issue>
  <issue tracker="bnc" id="1090028">VUL-0: CVE-2018-2798: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent AWT</issue>
  <issue tracker="bnc" id="1090032">VUL-0: CVE-2018-2814: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent Hotspot</issue>
  <issue tracker="bnc" id="1090033">VUL-0: CVE-2018-2815: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent Serialization</issue>
  <issue tracker="bnc" id="1090030">VUL-0: CVE-2018-2800: java-1_8_0-openjdk, java-1_7_0-openjdk: Unspecified vulnerability in subcomponent RMI</issue>
  <issue tracker="cve" id="2018-2795"/>
  <issue tracker="cve" id="2018-2794"/>
  <issue tracker="cve" id="2018-2797"/>
  <issue tracker="cve" id="2018-2796"/>
  <issue tracker="cve" id="2018-2790"/>
  <issue tracker="cve" id="2018-2800"/>
  <issue tracker="cve" id="2018-2799"/>
  <issue tracker="cve" id="2018-2798"/>
  <issue tracker="cve" id="2018-2814"/>
  <issue tracker="cve" id="2018-2815"/>
  <category>security</category>
  <rating>important</rating>
  <packager>fstrba</packager>
  <description>This update for java-1_8_0-openjdk to version 8u171 fixes the following issues:

These security issues were fixed:

- S8180881: Better packaging of deserialization
- S8182362: Update CipherOutputStream Usage
- S8183032: Upgrade to LittleCMS 2.9
- S8189123: More consistent classloading
- S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest entries
- S8189977, CVE-2018-2795, bsc#1090025: Improve permission portability
- S8189981, CVE-2018-2796, bsc#1090026: Improve queuing portability
- S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data portability
- S8189989, CVE-2018-2798, bsc#1090028: Improve container portability
- S8189993, CVE-2018-2799, bsc#1090029: Improve document portability
- S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore mechanisms
- S8190478: Improved interface method selection
- S8190877: Better handling of abstract classes
- S8191696: Better mouse positioning
- S8192025, CVE-2018-2814, bsc#1090032: Less referential references
- S8192030: Better MTSchema support
- S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes implementation
- S8193409: Improve AES supporting classes
- S8193414: Improvements in MethodType lookups
- S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection support

For other changes please consult the changelog.

This update was imported from the SUSE:SLE-12-SP1:Update update project.</description>
  <summary>Security update for java-1_8_0-openjdk</summary>
</patchinfo>