gpp_maybe Security update for java-1_8_0-ibm

SUSE-SLE-Module-Legacy-15-SP3-2022-108

This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052) - CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914) - CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913) - CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911) - CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910) - CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) - CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905) - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564) - CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055) - CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902) - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)

• Release Date
  Jan 18 2022
• References
  Bugzilla: 1185055, 1191904, 1194232, 1191905, 1194198, 1191911, 1188564, 1192052, 1191909, 1191913, 1188565, 1191914, 1191902, 1191910
  CVEs: CVE-2021-2163, CVE-2021-35564, CVE-2021-35560, CVE-2021-35586, CVE-2021-41035, CVE-2021-35556, CVE-2021-35565, CVE-2021-2341, CVE-2021-35588, CVE-2021-2369, CVE-2021-35578, CVE-2021-35559
• Type
  security
• Severity
  important

cloud_download Downloads

Legacy Module 15.3 s390x

• Packages
  java-1_8_0-ibm
  IBM Java(TM) Version 8 Runtime Environment

  1.8.0_sr7.0-3.53.1 lock rpm lock nosrc

  java-1_8_0-ibm-devel
  IBM Java(TM) Version 8 SDK, Standard Edition

  1.8.0_sr7.0-3.53.1 lock rpm

Legacy Module 15.3 ppc64le

• Packages
  java-1_8_0-ibm
  IBM Java(TM) Version 8 Runtime Environment

  1.8.0_sr7.0-3.53.1 lock rpm lock nosrc

  java-1_8_0-ibm-devel
  IBM Java(TM) Version 8 SDK, Standard Edition

  1.8.0_sr7.0-3.53.1 lock rpm

Legacy Module 15.3 x86_64

• Packages
  java-1_8_0-ibm
  IBM Java(TM) Version 8 Runtime Environment

  1.8.0_sr7.0-3.53.1 lock rpm lock nosrc

  java-1_8_0-ibm-alsa
  ALSA support for java-1_8_0-ibm

  1.8.0_sr7.0-3.53.1 lock rpm

  java-1_8_0-ibm-devel
  IBM Java(TM) Version 8 SDK, Standard Edition

  1.8.0_sr7.0-3.53.1 lock rpm

  java-1_8_0-ibm-plugin
  Browser plugin files for java-1_8_0-ibm

  1.8.0_sr7.0-3.53.1 lock rpm