U radu paketa java-1_6_0-openjdk ispravljene su brojne sigurnosne ranjivosti koje zlonamjernim napadačima omogućuju kompromitaciju povjerljivosti, integriteta i dostupnosti putem nepoznatih vektora.
Paket:
java-1.6.0-openjdk
Operacijski sustavi:
SUSE Linux Enterprise Desktop 10, SUSE Linux Enterprise Desktop 11
Kritičnost:
10
Problem:
nespecificirana pogreška, pogreška u programskoj komponenti
SUSE Security Update: Security update for java-1_6_0-openjdk
______________________________________________________________________________
Announcement ID: SUSE-SU-2012:0762-1
Rating: critical
References: #766802
Cross-References: CVE-2012-1711 CVE-2012-1713 CVE-2012-1716
CVE-2012-1717 CVE-2012-1719 CVE-2012-1723
CVE-2012-1724 CVE-2012-1725
Affected Products:
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP1
______________________________________________________________________________
An update that fixes 8 vulnerabilities is now available.
Description:
java-1_6_0-openjdk was updated to the IcedTea 1.11.3
release, fixing multiple security issues:
* S7079902, CVE-2012-1711: Refine CORBA data models
* S7143606, CVE-2012-1717: File.createTempFile should
be improved for temporary files created by the platform.
* S7143614, CVE-2012-1716: SynthLookAndFeel stability
improvement
* S7143617, CVE-2012-1713: Improve fontmanager layout
lookup operations
* S7143851, CVE-2012-1719: Improve IIOP stub and tie
generation in RMIC
* S7143872, CVE-2012-1718: Improve certificate
extension processing
* S7152811, CVE-2012-1723: Issues in client compiler
* S7157609, CVE-2012-1724: Issues with loop
* S7160757, CVE-2012-1725: Problem with
hotspot/runtime_classfile
Security Issue references:
* CVE-2012-1725
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1725
>
* CVE-2012-1723
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1723
>
* CVE-2012-1713
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713
>
* CVE-2012-1716
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1716
>
* CVE-2012-1711
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1711
>
* CVE-2012-1724
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1724
>
* CVE-2012-1719
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1719
>
* CVE-2012-1717
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1717
>
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Desktop 11 SP2:
zypper in -t patch sledsp1-java-1_6_0-openjdk-6437
- SUSE Linux Enterprise Desktop 11 SP1:
zypper in -t patch sledsp1-java-1_6_0-openjdk-6437
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):
java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.3.1
java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.3.1
java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.3.1
- SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64):
java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.3.1
java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.3.1
java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.3.1
References:
http://support.novell.com/security/cve/CVE-2012-1711.html
http://support.novell.com/security/cve/CVE-2012-1713.html
http://support.novell.com/security/cve/CVE-2012-1716.html
http://support.novell.com/security/cve/CVE-2012-1717.html
http://support.novell.com/security/cve/CVE-2012-1719.html
http://support.novell.com/security/cve/CVE-2012-1723.html
http://support.novell.com/security/cve/CVE-2012-1724.html
http://support.novell.com/security/cve/CVE-2012-1725.html
https://bugzilla.novell.com/766802
http://download.novell.com/patch/finder/?keywords=238a3f3249e53037791e1d82285d7523
--
To unsubscribe, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
For additional commands, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
Posljednje sigurnosne preporuke