SUSE-SU-2019:2036-1

Dashboard / Vulnerabilities / SUSE-SU-2019:2036-1

SUSE-SU-2019:2036-1

Summary: Security update for java-1_8_0-openjdk

Details: This update for java-1_8_0-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol handling (bsc#1141789). - CVE-2019-2769: Better copies of CopiesList (bsc#1141783). - CVE-2019-2786: More limited privilege usage (bsc#1141787). - CVE-2019-2816: Normalize normalization (bsc#1141785). - CVE-2019-2842: Extended AES support (bsc#1141786). - CVE-2019-7317: Improve PNG support (bsc#1141780). - Certificate validation improvements Non-security issue fixed: - Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)

References: https://www.suse.com/support/update/announcement/2019/suse-su-20192036-1/, https://bugzilla.suse.com/1115375, https://bugzilla.suse.com/1141780, https://bugzilla.suse.com/1141782, https://bugzilla.suse.com/1141783, https://bugzilla.suse.com/1141784, https://bugzilla.suse.com/1141785, https://bugzilla.suse.com/1141786, https://bugzilla.suse.com/1141787, https://bugzilla.suse.com/1141789, https://www.suse.com/security/cve/CVE-2019-2745, https://www.suse.com/security/cve/CVE-2019-2762, https://www.suse.com/security/cve/CVE-2019-2766, https://www.suse.com/security/cve/CVE-2019-2769, https://www.suse.com/security/cve/CVE-2019-2786, https://www.suse.com/security/cve/CVE-2019-2816, https://www.suse.com/security/cve/CVE-2019-2842, https://www.suse.com/security/cve/CVE-2019-7317