Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729). - CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE Non-Security issue fixed: - Disable LTO (bsc#1133135). - Added Japanese new era name.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729). - CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE Non-Security issue fixed: - Disable LTO (bsc#1133135). - Added Japanese new era name.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1132728
- https://bugzilla.suse.com/1132729
- https://bugzilla.suse.com/1132732
- https://bugzilla.suse.com/1133135
- https://www.suse.com/security/cve/CVE-2018-3639
- https://www.suse.com/security/cve/CVE-2019-2602
- https://www.suse.com/security/cve/CVE-2019-2684
- https://www.suse.com/security/cve/CVE-2019-2698
- https://www.suse.com/support/update/announcement/2019/suse-su-20191211-1/