SCIENTIFIC-LINUX-ERRATA Archives

July 2019

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Moderate: java-11-openjdk on SL7.x x86_64
From:
Farhan Ahmed <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Mon, 22 Jul 2019 16:23:10 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (76 lines) 
Synopsis: Moderate: java-11-openjdk security update
Advisory ID:       SLSA-2019:1810-1
Issue Date:        2019-07-22
CVE Numbers:       CVE-2019-2769
                   CVE-2019-2816
                   CVE-2019-2786
                   CVE-2019-2745
                   CVE-2019-2762
                   CVE-2019-2818
                   CVE-2019-2821
--

Security Fix(es):

* OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography
(Security, 8208698) (CVE-2019-2745)

* OpenJDK: Insufficient checks of suppressed exceptions in deserialization
(Utilities, 8212328) (CVE-2019-2762)

* OpenJDK: Unbounded memory allocation during deserialization in
Collections (Utilities, 8213432) (CVE-2019-2769)

* OpenJDK: Missing URL format validation (Networking, 8221518)
(CVE-2019-2816)

* OpenJDK: Incorrect handling of certificate status messages during TLS
handshake (JSSE, 8222678) (CVE-2019-2821)

* OpenJDK: Insufficient restriction of privileges in AccessController
(Security, 8216381) (CVE-2019-2786)

* OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security,
8221344) (CVE-2019-2818)
--

SL7
  x86_64
    java-11-openjdk-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-debuginfo-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-debuginfo-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-headless-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-headless-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-demo-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-demo-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-demo-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-demo-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-devel-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-devel-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-devel-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-devel-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-headless-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-headless-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-javadoc-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-javadoc-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-javadoc-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-javadoc-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-javadoc-zip-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-javadoc-zip-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-javadoc-zip-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-javadoc-zip-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-jmods-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-jmods-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-jmods-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-jmods-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-src-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-src-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-src-debug-11.0.4.11-0.el7_6.i686.rpm
    java-11-openjdk-src-debug-11.0.4.11-0.el7_6.x86_64.rpm
    java-11-openjdk-11.0.4.11-0.el7_6.src.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2