FlawAtlas
Search the atlas
SUSE-SU-2019:1392-1 Not scored

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk fixes the following issues: Update to 2.6.18 - OpenJDK 7u221 (April 2019 CPU) Security issues fixed: - CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728). - CVE-2019-2684: Fixed flaw inside the RMI registry implementation (bsc#1132732). - CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729). - CVE-2019-2422: Fixed memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed a Divide By Zero in alloc_sarray function in jmemmgr.c (bsc#1122299). - CVE-2019-2426: Improve web server connections (bsc#1134297). Bug fixes: - Please check the package Changelog for detailed information.

Exploit probability Not scored
Published May 31, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 4 java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP3 java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4 java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3 java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP4 java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12-LTSS java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_0-openjdk
SUSE:OpenStack Cloud 7 java-1_7_0-openjdk

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:1392-1

This update for java-1_7_0-openjdk fixes the following issues: Update to 2.6.18 - OpenJDK 7u221 (April 2019 CPU) Security issues fixed: - CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728). - CVE-2019-2684: Fixed flaw inside the RMI registry implementation (bsc#1132732). - CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729). - CVE-2019-2422: Fixed memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed a Divide By Zero in alloc_sarray function in jmemmgr.c (bsc#1122299). - CVE-2019-2426: Improve web server connections (bsc#1134297). Bug fixes: - Please check the package Changelog for detailed information.

View original source

05 / REFERENCES

Further evidence