Security update for java-1_8_0-openjdk (important)

An update that fixes four vulnerabilities is now available.

Description:

This update for java-1_8_0-openjdk to version 8u212 fixes the following
issues:

Security issues fixed:

• CVE-2019-2602: Better String parsing (bsc#1132728).
• CVE-2019-2684: More dynamic RMI interactions (bsc#1132732).
• CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729).
• CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to
  PR_SPEC_DISABLE

Non-Security issue fixed:

• Disable LTO (bsc#1133135).
• Added Japanese new era name.

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.0:

  zypper in -t patch openSUSE-2019-1438=1