SUSE-SU-2018:1690-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2018/suse-su-20181690-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1690-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:1690-1

Related

CVE-2018-2790
CVE-2018-2794
CVE-2018-2795
CVE-2018-2796
CVE-2018-2797
CVE-2018-2798
CVE-2018-2799
CVE-2018-2800
CVE-2018-2814
CVE-2018-2815

Published

2018-06-14T08:42:34Z

Modified

2018-06-14T08:42:34Z

Summary

Security update for java-1_8_0-openjdk

Details

This update for java-180-openjdk to version 8u171 fixes the following issues:

These security issues were fixed:

S8180881: Better packaging of deserialization
S8182362: Update CipherOutputStream Usage
S8183032: Upgrade to LittleCMS 2.9
S8189123: More consistent classloading
S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest entries
S8189977, CVE-2018-2795, bsc#1090025: Improve permission portability
S8189981, CVE-2018-2796, bsc#1090026: Improve queuing portability
S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data portability
S8189989, CVE-2018-2798, bsc#1090028: Improve container portability
S8189993, CVE-2018-2799, bsc#1090029: Improve document portability
S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore mechanisms
S8190478: Improved interface method selection
S8190877: Better handling of abstract classes
S8191696: Better mouse positioning
S8192025, CVE-2018-2814, bsc#1090032: Less referential references
S8192030: Better MTSchema support
S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes implementation
S8193409: Improve AES supporting classes
S8193414: Improvements in MethodType lookups
S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection support

For other changes please consult the changelog.

References

Affected packages

SUSE:OpenStack Cloud 7 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP3 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1-LTSS / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Enterprise Storage 4 / java-1_8_0-openjdk

Package

Name: java-1_8_0-openjdk
Purl: purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}