Security update for java-1_7_0-ibm

SUSE Security Update: Security update for java-1_7_0-ibm
Announcement ID: SUSE-SU-2018:3920-1
Rating: important
References: #1116574
Cross-References: CVE-2018-13785 CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-3214
Affected Products:
  • SUSE Linux Enterprise Server 11-SP3-LTSS
  • SUSE Linux Enterprise Point of Sale 11-SP3

An update that fixes 7 vulnerabilities is now available.

Description:



java-1_7_0-ibm is updated to Java 7.0 Service Refresh 10 Fix Pack 35 (bsc#1116574):

  • Class Libraries

- IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-3149 - IJ10894 CVE-2018-3180 - IJ10933 CVE-2018-3214 - IJ09315 FLOATING POINT EXCEPTION FROM JAVA.TEXT.DECIMALFORMAT. FORMAT - IJ09088 INTRODUCING A NEW PROPERTY FOR TURKEY TIMEZONE FOR PRODUCTS NOT IDENTIFYING TRT - IJ10800 REMOVE EXPIRING ROOT CERTIFICATES IN IBM JDK’S CACERTS
  • Java Virtual Machine

- IJ10931 CVE-2018-3169
  • JIT Compiler

- IJ08205 CRASH WHILE COMPILING
  • Security - IJ10492 'EC KEYSIZE

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Server 11-SP3-LTSS:
    zypper in -t patch slessp3-java-1_7_0-ibm-13882=1
  • SUSE Linux Enterprise Point of Sale 11-SP3:
    zypper in -t patch sleposp3-java-1_7_0-ibm-13882=1

Package List:

  • SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64):
    • java-1_7_0-ibm-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-devel-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-jdbc-1.7.0_sr10.35-65.31.1
  • SUSE Linux Enterprise Server 11-SP3-LTSS (i586 x86_64):
    • java-1_7_0-ibm-alsa-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-plugin-1.7.0_sr10.35-65.31.1
  • SUSE Linux Enterprise Point of Sale 11-SP3 (i586):
    • java-1_7_0-ibm-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-alsa-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-devel-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-jdbc-1.7.0_sr10.35-65.31.1
    • java-1_7_0-ibm-plugin-1.7.0_sr10.35-65.31.1

References: