Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299). - CVE-2018-1890: Fixed a local privilege escalation via RPATHs (bsc#1128158). - CVE-2019-2449: Fixed a vulnerabilit which could allow remote atackers to delete arbitrary files (bsc#1122292). More information: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299). - CVE-2018-1890: Fixed a local privilege escalation via RPATHs (bsc#1128158). - CVE-2019-2449: Fixed a vulnerabilit which could allow remote atackers to delete arbitrary files (bsc#1122292). More information: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1122292
- https://bugzilla.suse.com/1122293
- https://bugzilla.suse.com/1122299
- https://bugzilla.suse.com/1128158
- https://www.suse.com/security/cve/CVE-2018-11212
- https://www.suse.com/security/cve/CVE-2018-1890
- https://www.suse.com/security/cve/CVE-2019-2422
- https://www.suse.com/security/cve/CVE-2019-2449
- https://www.suse.com/support/update/announcement/2019/suse-su-20190617-1/