This update for java-1_8_0-openj9 fixes the following issues :

-OpenJDK was updated to 8u2732 build 10 with OpenJ9 0.23.0 virtual machine

-includes Oracle July 2020 (bsc#1174157) and October 2020 CPU (bsc#1177943)

  - CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,     CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,     CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,     CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,     CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and     CVE-2020-14803

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for java-1_7_0-openjdk fixes the following issues :

Update to 2.6.24 - OpenJDK 7u281 (October 2020 CPU, bsc#1177943)

  - Security fixes

  + JDK-8233624: Enhance JNI linkage

  + JDK-8236862, CVE-2020-14779: Enhance support of Proxy     class

  + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts

  + JDK-8237995, CVE-2020-14782: Enhance certificate     processing

  + JDK-8240124: Better VM Interning

  + JDK-8241114, CVE-2020-14792: Better range handling

  + JDK-8242680, CVE-2020-14796: Improved URI Support

  + JDK-8242685, CVE-2020-14797: Better Path Validation

  + JDK-8242695, CVE-2020-14798: Enhanced buffer support

  + JDK-8243302: Advanced class supports

  + JDK-8244136, CVE-2020-14803: Improved Buffer supports

  + JDK-8244479: Further constrain certificates

  + JDK-8244955: Additional Fix for JDK-8240124

  + JDK-8245407: Enhance zoning of times

  + JDK-8245412: Better class definitions

  + JDK-8245417: Improve certificate chain handling

  + JDK-8248574: Improve jpeg processing

  + JDK-8249927: Specify limits of     jdk.serialProxyInterfaceLimit

  + JDK-8253019: Enhanced JPEG decoding

  - Import of OpenJDK 7 u281 build 1

  + JDK-8145096: Undefined behaviour in HotSpot

  + JDK-8215265: C2: range check elimination may allow     illegal out of bound access

  - Backports

  + JDK-8250861, PR3812: Crash in MinINode::Ideal(PhaseGVN*,     bool)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
142853	openSUSE Security Update : java-1_8_0-openj9 (openSUSE-2020-1893)	Nessus	SuSE Local Security Checks	2020/11/12	2024/2/8	high
143688	SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:3310-1)	Nessus	SuSE Local Security Checks	2020/12/9	2022/12/5	medium
143791	SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:3159-1)	Nessus	SuSE Local Security Checks	2020/12/9	2022/12/5	medium

检测

插件搜索

high

medium

medium