SUSE-SU-2019:2028-1

Dashboard / Vulnerabilities / SUSE-SU-2019:2028-1

SUSE-SU-2019:2028-1

Summary: Security update for java-1_7_0-openjdk

Details: This update for java-1_7_0-openjdk to version 7u231 fixes the following issues: Security issues fixed: - CVE_2019-2426: Improve web server connections (bsc#1134297). - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol handling (bsc#1141789). - CVE-2019-2769: Better copies of CopiesList (bsc#1141783). - CVE-2019-2786: More limited privilege usage (bsc#1141787). - CVE-2019-2816: Normalize normalization (bsc#1141785). - CVE-2019-2842: Extended AES support (bsc#1141786). - CVE-2019-7317: Improve PNG support (bsc#1141780). - CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE (bsc#1087082). - Certificate validation improvements

References: https://www.suse.com/support/update/announcement/2019/suse-su-20192028-1/, https://bugzilla.suse.com/1087082, https://bugzilla.suse.com/1134297, https://bugzilla.suse.com/1141780, https://bugzilla.suse.com/1141782, https://bugzilla.suse.com/1141783, https://bugzilla.suse.com/1141784, https://bugzilla.suse.com/1141785, https://bugzilla.suse.com/1141786, https://bugzilla.suse.com/1141787, https://bugzilla.suse.com/1141789, https://www.suse.com/security/cve/CVE-2018-3639, https://www.suse.com/security/cve/CVE-2019-2426, https://www.suse.com/security/cve/CVE-2019-2745, https://www.suse.com/security/cve/CVE-2019-2762, https://www.suse.com/security/cve/CVE-2019-2766, https://www.suse.com/security/cve/CVE-2019-2769, https://www.suse.com/security/cve/CVE-2019-2786, https://www.suse.com/security/cve/CVE-2019-2816, https://www.suse.com/security/cve/CVE-2019-2842, https://www.suse.com/security/cve/CVE-2019-7317