Lucene search

K
suseSuseOPENSUSE-SU-2017:2998-1
HistoryNov 12, 2017 - 6:09 p.m.

Security update for java-1_8_0-openjdk (important)

2017-11-1218:09:03
lists.opensuse.org
297

0.014 Low

EPSS

Percentile

85.0%

This update for java-1_8_0-openjdk fixes the following issues:

  • Update to version jdk8u151 (icedtea 3.6.0)

Security issues fixed:

  • CVE-2017-10274: Handle smartcard clean up better (bsc#1064071)
  • CVE-2017-10281: Better queuing priorities (bsc#1064072)
  • CVE-2017-10285: Unreferenced references (bsc#1064073)
  • CVE-2017-10295: Better URL connections (bsc#1064075)
  • CVE-2017-10388: Correct Kerberos ticket grants (bsc#1064086)
  • CVE-2017-10346: Better invokespecial checks (bsc#1064078)
  • CVE-2017-10350: Better Base Exceptions (bsc#1064082)
  • CVE-2017-10347: Better timezone processing (bsc#1064079)
  • CVE-2017-10349: Better X processing (bsc#1064081)
  • CVE-2017-10345: Better keystore handling (bsc#1064077)
  • CVE-2017-10348: Better processing of unresolved permissions (bsc#1064080)
  • CVE-2017-10357: Process Proxy presentation (bsc#1064085)
  • CVE-2017-10355: More stable connection processing (bsc#1064083)
  • CVE-2017-10356: Update storage implementations (bsc#1064084)
  • CVE-2016-10165: Improve CMS header processing (bsc#1064069)
  • CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843: Upgrade
    compression library (bsc#1064070)

Bug fixes:

  • Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and overlayfs

This update was imported from the SUSE:SLE-12-SP1:Update update project.