SUSE-SU-2018:1690-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1690-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2018:1690-1
Related
  • CVE-2018-2790
  • CVE-2018-2794
  • CVE-2018-2795
  • CVE-2018-2796
  • CVE-2018-2797
  • CVE-2018-2798
  • CVE-2018-2799
  • CVE-2018-2800
  • CVE-2018-2814
  • CVE-2018-2815
Published
2018-06-14T08:42:34Z
Modified
2018-06-14T08:42:34Z
Summary
Security update for java-1_8_0-openjdk
Details

This update for java-180-openjdk to version 8u171 fixes the following issues:

These security issues were fixed:

  • S8180881: Better packaging of deserialization
  • S8182362: Update CipherOutputStream Usage
  • S8183032: Upgrade to LittleCMS 2.9
  • S8189123: More consistent classloading
  • S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest entries
  • S8189977, CVE-2018-2795, bsc#1090025: Improve permission portability
  • S8189981, CVE-2018-2796, bsc#1090026: Improve queuing portability
  • S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data portability
  • S8189989, CVE-2018-2798, bsc#1090028: Improve container portability
  • S8189993, CVE-2018-2799, bsc#1090029: Improve document portability
  • S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore mechanisms
  • S8190478: Improved interface method selection
  • S8190877: Better handling of abstract classes
  • S8191696: Better mouse positioning
  • S8192025, CVE-2018-2814, bsc#1090032: Less referential references
  • S8192030: Better MTSchema support
  • S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes implementation
  • S8193409: Improve AES supporting classes
  • S8193414: Improvements in MethodType lookups
  • S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection support

For other changes please consult the changelog.

References

Affected packages

SUSE:OpenStack Cloud 7 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP3 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1-LTSS / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}

SUSE:Enterprise Storage 4 / java-1_8_0-openjdk

Package

Name
java-1_8_0-openjdk
Purl
purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.0.171-27.19.1

Ecosystem specific

{
    "binaries": [
        {
            "java-1_8_0-openjdk-demo": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-devel": "1.8.0.171-27.19.1",
            "java-1_8_0-openjdk-headless": "1.8.0.171-27.19.1"
        }
    ]
}