Detalji
Kreirano: 15 Lipanj 2011
Objavljena je nadogradnja programskog paketa Oracle Java 6 koja ispravlja višestruke sigurnosne nedostatke. Većina njih posljedica je nespecificiranih pogrešaka koje na različite načine ugrožavaju povjerljivost, integritet i dostupnost aplikacija za čije je ostvarenje korišten spomenuti programski paket.
Paket:
Oracle Java 6
Operacijski sustavi:
openSUSE 11.3, openSUSE 11.4
Kritičnost:
7.5
Problem:
nespecificirana pogreška, pogreška u programskoj komponenti
Iskorištavanje:
lokalno/udaljeno
Posljedica:
otkrivanje osjetljivih informacija
Rješenje:
programska zakrpa proizvođača
CVE:
CVE-2011-0786, CVE-2011-0788, CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0817, CVE-2011-0862, CVE-2011-0863, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873
Izvorni ID preporuke:
openSUSE-SU-2011:0633-1
Izvor:
SUSE
Problem:
Većina uočenih nedostataka posljedica su nespecificiranih pogrešaka u Java Runtime Environment (JRE) komponenti.
Posljedica:
Navedeni nedostaci na različite načine ugrožavaju povjerljivost, integritet i dostupnost aplikacija za čije je ostvarenje korišten paket Oracle Java 6.
Rješenje:
Svim se korisnicima savjetuje primjena nadogradnje kako bi otklonili uočene ranjivosti.
Izvorni tekst preporuke
openSUSE Security Update: Oracle Java 26
______________________________________________________________________________
Announcement ID: openSUSE-SU-2011:0633-1
Rating: critical
References: #698754
Cross-References: CVE-2011-0786 CVE-2011-0788 CVE-2011-0802
CVE-2011-0814 CVE-2011-0815 CVE-2011-0817
CVE-2011-0862 CVE-2011-0863 CVE-2011-0864
CVE-2011-0865 CVE-2011-0866 CVE-2011-0867
CVE-2011-0868 CVE-2011-0869 CVE-2011-0871
CVE-2011-0872 CVE-2011-0873
Affected Products:
openSUSE 11.4
openSUSE 11.3
______________________________________________________________________________
An update that fixes 17 vulnerabilities is now available.
It includes one version update.
Description:
Oracle Java 6 Update 26 fixes several security
vulnerabilities.
Please refer to Oracle's site for further information:
http://www.oracle.com/technetwork/topics/security/javacpujun
e2011-313339.html
(CVE-2011-0862, CVE-2011-0873, CVE-2011-0815,
CVE-2011-0817, CVE-2011-0863, CVE-2011-0864, CVE-2011-0802,
CVE-2011-0814, CVE-2011-0871, CVE-2011-0786, CVE-2011-0788,
CVE-2011-0866, CVE-2011-0868, CVE-2011-0872, CVE-2011-0867,
CVE-2011-0869, CVE-2011-0865)
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 11.4:
zypper in -t patch java-1_6_0-sun-4694
- openSUSE 11.3:
zypper in -t patch java-1_6_0-sun-4694
To bring your system up-to-date, use "zypper patch".
Package List:
- openSUSE 11.4 (i586 x86_64) [New Version: 1.6.0.u26]:
java-1_6_0-sun-1.6.0.u26-0.2.1
java-1_6_0-sun-alsa-1.6.0.u26-0.2.1
java-1_6_0-sun-demo-1.6.0.u26-0.2.1
java-1_6_0-sun-devel-1.6.0.u26-0.2.1
java-1_6_0-sun-jdbc-1.6.0.u26-0.2.1
java-1_6_0-sun-plugin-1.6.0.u26-0.2.1
java-1_6_0-sun-src-1.6.0.u26-0.2.1
- openSUSE 11.3 (i586 x86_64) [New Version: 1.6.0.u26]:
java-1_6_0-sun-1.6.0.u26-0.2.1
java-1_6_0-sun-alsa-1.6.0.u26-0.2.1
java-1_6_0-sun-devel-1.6.0.u26-0.2.1
java-1_6_0-sun-jdbc-1.6.0.u26-0.2.1
java-1_6_0-sun-plugin-1.6.0.u26-0.2.1
java-1_6_0-sun-src-1.6.0.u26-0.2.1
References:
http://support.novell.com/security/cve/CVE-2011-0786.html
http://support.novell.com/security/cve/CVE-2011-0788.html
http://support.novell.com/security/cve/CVE-2011-0802.html
http://support.novell.com/security/cve/CVE-2011-0814.html
http://support.novell.com/security/cve/CVE-2011-0815.html
http://support.novell.com/security/cve/CVE-2011-0817.html
http://support.novell.com/security/cve/CVE-2011-0862.html
http://support.novell.com/security/cve/CVE-2011-0863.html
http://support.novell.com/security/cve/CVE-2011-0864.html
http://support.novell.com/security/cve/CVE-2011-0865.html
http://support.novell.com/security/cve/CVE-2011-0866.html
http://support.novell.com/security/cve/CVE-2011-0867.html
http://support.novell.com/security/cve/CVE-2011-0868.html
http://support.novell.com/security/cve/CVE-2011-0869.html
http://support.novell.com/security/cve/CVE-2011-0871.html
http://support.novell.com/security/cve/CVE-2011-0872.html
http://support.novell.com/security/cve/CVE-2011-0873.html
https://bugzilla.novell.com/698754
--
To unsubscribe, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
For additional commands, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
Posljednje sigurnosne preporuke