openSUSE-SU-2019:0043-1

Dashboard / Vulnerabilities / openSUSE-SU-2019:0043-1

openSUSE-SU-2019:0043-1

Summary: Security update for java-1_8_0-openjdk

Details: This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#1112144) - CVE-2018-3169: Improve field accesses (bsc#1112146) - CVE-2018-3180: Improve TLS connections stability (bsc#1112147) - CVE-2018-3214: Better RIFF reading support (bsc#1112152) - CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153) - CVE-2018-3183: Improve script engine support (bsc#1112148) - CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile This update was imported from the SUSE:SLE-15:Update update project.

References: https://lists.opensuse.org/archives/list/[email protected]/thread/U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ/#U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ, https://bugzilla.suse.com/1112142, https://bugzilla.suse.com/1112143, https://bugzilla.suse.com/1112144, https://bugzilla.suse.com/1112146, https://bugzilla.suse.com/1112147, https://bugzilla.suse.com/1112148, https://bugzilla.suse.com/1112152, https://bugzilla.suse.com/1112153, https://www.suse.com/security/cve/CVE-2018-13785, https://www.suse.com/security/cve/CVE-2018-16435, https://www.suse.com/security/cve/CVE-2018-3136, https://www.suse.com/security/cve/CVE-2018-3139, https://www.suse.com/security/cve/CVE-2018-3149, https://www.suse.com/security/cve/CVE-2018-3169, https://www.suse.com/security/cve/CVE-2018-3180, https://www.suse.com/security/cve/CVE-2018-3183, https://www.suse.com/security/cve/CVE-2018-3214