shield Security update for java-1_7_1-ibm

SUSE-SLE-SAP-12-SP3-2022-166

This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 5 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052) - CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914) - CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913) - CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911) - CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910) - CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) - CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905) - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564) - CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2432: Fixed a vulnerability in the omponent JNDI. (bsc#1188568) - CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)

• Release Date
  Jan 24 2022
• References
  Bugzilla: 1191911, 1188564, 1192052, 1191914, 1191913, 1185055, 1194198, 1194232, 1188565, 1191909, 1188568, 1191910, 1191905
  CVEs: CVE-2021-35556, CVE-2021-35565, CVE-2021-35588, CVE-2021-35586, CVE-2021-2369, CVE-2021-2432, CVE-2021-35559, CVE-2021-41035, CVE-2021-35564, CVE-2021-2163, CVE-2021-2341
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.3 x86_64

• Packages
  java-1_7_1-ibm
  IBM Java(TM) Version 7 Release 1 Runtime Environment

  1.7.1_sr5.0-38.65.1 lock rpm lock nosrc

  java-1_7_1-ibm-alsa
  ALSA support for java-1_7_1-ibm

  1.7.1_sr5.0-38.65.1 lock rpm

  java-1_7_1-ibm-devel
  IBM Java(TM) Version 7 Release 1 SDK, Standard Edition

  1.7.1_sr5.0-38.65.1 lock rpm

  java-1_7_1-ibm-jdbc
  JDBC/ODBC bridge driver for java-1_7_1-ibm

  1.7.1_sr5.0-38.65.1 lock rpm

  java-1_7_1-ibm-plugin
  Browser plugin files for java-1_7_1-ibm

  1.7.1_sr5.0-38.65.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  java-1_7_1-ibm
  IBM Java(TM) Version 7 Release 1 Runtime Environment

  1.7.1_sr5.0-38.65.1 lock rpm lock nosrc

  java-1_7_1-ibm-devel
  IBM Java(TM) Version 7 Release 1 SDK, Standard Edition

  1.7.1_sr5.0-38.65.1 lock rpm

  java-1_7_1-ibm-jdbc
  JDBC/ODBC bridge driver for java-1_7_1-ibm

  1.7.1_sr5.0-38.65.1 lock rpm