Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

openSUSE 12.2 Important: 2012:1419-1 Java OpenJDK Security Fix

opensuse
Calendar Grey October 31, 2012
Dist Opensuse Esm H88
Resolutions for 17 concerns in openSUSE java-1_7_0-openjdk using icedtea-2.3.3. Upgrade can be accessed through YaST or zypper.
An update that fixes 17 vulnerabilities is now available.

Description

java-1_7_0-opendjk was updated to icedtea-2.3.3 (bnc#785814)

* Security fixes

- S6631398, CVE-2012-3216: FilePermission improved path

checking

- S7093490: adjust package access in rmiregistry

- S7143535, CVE-2012-5068: ScriptEngine corrected

permissions

- S7158796, CVE-2012-5070: Tighten properties checking in

EnvHelp

- S7158807: Revise stack management with volatile call

sites

- S7163198, CVE-2012-5076: Tightened package accessibility

- S7167656, CVE-2012-5077: Multiple Seeders are being

created

- S7169884, CVE-2012-5073: LogManager checks do not work

correctly for sub-types

- S7169887, CVE-2012-5074: Tightened package accessibility

- S7169888, CVE-2012-5075: Narrowing resource definitions

in JMX RMI connector

- S7172522, CVE-2012-5072: Improve DomainCombiner checking

- S7186286, CVE-2012-5081: TLS implementation to better

adhere to RFC

- S7189103, CVE-2012-5069: Executors needs to maintain

state

- S7189490:...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue important update Java Update openSUSE icedtea Patch Instruction

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.2:

zypper in -t patch openSUSE-2012-749

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.2 (i586 x86_64):

java-1_7_0-openjdk-1.7.0.6-3.16.1

java-1_7_0-openjdk-debuginfo-1.7.0.6-3.16.1

java-1_7_0-openjdk-debugsource-1.7.0.6-3.16.1

java-1_7_0-openjdk-demo-1.7.0.6-3.16.1

java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-3.16.1

java-1_7_0-openjdk-devel-1.7.0.6-3.16.1

java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-3.16.1

java-1_7_0-openjdk-javadoc-1.7.0.6-3.16.1

java-1_7_0-openjdk-src-1.7.0.6-3.16.1

References

https://www.suse.com/security/cve/CVE-2012-3216.html

https://www.suse.com/security/cve/CVE-2012-4416.html

https://www.suse.com/security/cve/CVE-2012-5068.html

https://www.suse.com/security/cve/CVE-2012-5069.html

https://www.suse.com/security/cve/CVE-2012-5070.html

https://www.suse.com/security/cve/CVE-2012-5071.html

https://www.suse.com/security/cve/CVE-2012-5073.html

https://www.suse.com/security/cve/CVE-2012-5074.html

https://www.suse.com/security/cve/CVE-2012-5075.html

https://www.suse.com/security/cve/CVE-2012-5076.html

https://www.suse.com/security/cve/CVE-2012-5077.html

https://www.suse.com/security/cve/CVE-2012-5084.html

https://www.suse.com/security/cve/CVE-2012-5085.html

https://www.suse.com/security/cve/CVE-2012-5086.html

https://www.suse.com/security/cve/CVE-2012-5087.html

https://www.suse.com/security/cve/CVE-2012-5088.html

https://www.suse.com/security/cve/CVE-2012-5089.html

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:1419-1
Rating: important
Affected Products: openSUSE 12.2

Topics%20covered

Topics Covered

security advisory security issue important update Java Update openSUSE icedtea Patch Instruction

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here