FlawAtlas
Search the atlas
SUSE-SU-2021:0019-1 Not scored

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * Class Libraries: - Z/OS specific C function send_file is changing the file pointer position * Security: - Add the new oracle signer certificate - Certificate parsing error - JVM memory growth can be caused by the IBMPKCS11IMPL crypto provider - Remove check for websphere signed jars - sessionid.hashcode generates too many collisions - The Java 8 IBM certpath provider does not honor the user specified system property for CLR connect timeout

Exploit probability Not scored
Published January 4, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 5 java-1_7_1-ibm
SUSE:HPE Helion OpenStack 8 java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP4-LTSS java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP5 java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5 java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5 java-1_7_1-ibm
SUSE:OpenStack Cloud 7 java-1_7_1-ibm
SUSE:OpenStack Cloud 8 java-1_7_1-ibm
SUSE:OpenStack Cloud 9 java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 8 java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 9 java-1_7_1-ibm

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:0019-1

This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * Class Libraries: - Z/OS specific C function send_file is changing the file pointer position * Security: - Add the new oracle signer certificate - Certificate parsing error - JVM memory growth can be caused by the IBMPKCS11IMPL crypto provider - Remove check for websphere signed jars - sessionid.hashcode generates too many collisions - The Java 8 IBM certpath provider does not honor the user specified system property for CLR connect timeout

View original source

05 / REFERENCES

Further evidence