SCIENTIFIC-LINUX-ERRATA Archives

July 2019

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Content-Type:
text/plain; charset="utf-8"
Date:
Mon, 22 Jul 2019 16:23:36 -0000
Reply-To:
[log in to unmask]
Subject:
Security ERRATA Moderate: java-1.8.0-openjdk on SL7.x x86_64
MIME-Version:
1.0
Message-ID:
<[log in to unmask]>
Content-Transfer-Encoding:
7bit
Sender:
Security Errata for Scientific Linux <[log in to unmask]>
From:
Farhan Ahmed <[log in to unmask]>
Parts/Attachments:
text/plain (69 lines) 
Synopsis: Moderate: java-1.8.0-openjdk security update
Advisory ID:       SLSA-2019:1815-1
Issue Date:        2019-07-22
CVE Numbers:       CVE-2019-2769
                   CVE-2019-2816
                   CVE-2019-2842
                   CVE-2019-2786
                   CVE-2019-2745
                   CVE-2019-2762
--

Security Fix(es):

* OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography
(Security, 8208698) (CVE-2019-2745)

* OpenJDK: Insufficient checks of suppressed exceptions in deserialization
(Utilities, 8212328) (CVE-2019-2762)

* OpenJDK: Unbounded memory allocation during deserialization in
Collections (Utilities, 8213432) (CVE-2019-2769)

* OpenJDK: Missing URL format validation (Networking, 8221518)
(CVE-2019-2816)

* OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)
(CVE-2019-2842)

* OpenJDK: Insufficient restriction of privileges in AccessController
(Security, 8216381) (CVE-2019-2786)
--

SL7
  x86_64
    java-1.8.0-openjdk-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-debuginfo-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-debuginfo-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-headless-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-headless-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-accessibility-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-accessibility-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-accessibility-debug-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-accessibility-debug-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-debug-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-debug-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-demo-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-demo-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-demo-debug-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-demo-debug-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-devel-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-devel-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-devel-debug-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-devel-debug-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-headless-debug-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-headless-debug-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-src-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-src-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-src-debug-1.8.0.222.b10-0.el7_6.i686.rpm
    java-1.8.0-openjdk-src-debug-1.8.0.222.b10-0.el7_6.x86_64.rpm
    java-1.8.0-openjdk-1.8.0.222.b10-0.el7_6.src.rpm
  noarch
    java-1.8.0-openjdk-javadoc-1.8.0.222.b10-0.el7_6.noarch.rpm
    java-1.8.0-openjdk-javadoc-debug-1.8.0.222.b10-0.el7_6.noarch.rpm
    java-1.8.0-openjdk-javadoc-zip-1.8.0.222.b10-0.el7_6.noarch.rpm
    java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.222.b10-0.el7_6.noarch.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2