Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

openSUSE: 2015:0774-1 Important: Remote Code Execution in Java

opensuse
Calendar Grey April 27, 2015
Scroller Opensuse
openSUSE released a crucial security update for java-1_7_0-openjdk addressing vulnerabilities that could lead to unauthorized access and exploitation, enhancing security for users
An update that fixes 11 vulnerabilities is now available

Description

OpenJDK was updated to 2.5.5 - OpenJdk 7u79 to fix security issues and

bugs:

The following vulnerabilities were fixed:

* CVE-2015-0458: Deployment: unauthenticated remote attackers could

execute arbitrary code via multiple protocols.

* CVE-2015-0459: 2D: unauthenticated remote attackers could execute

arbitrary code via multiple protocols.

* CVE-2015-0460: Hotspot: unauthenticated remote attackers could execute

arbitrary code via multiple protocols.

* CVE-2015-0469: 2D: unauthenticated remote attackers could execute

arbitrary code via multiple protocols.

* CVE-2015-0477: Beans: unauthenticated remote attackers could update,

insert or delete some JAVA accessible data via multiple protocols

* CVE-2015-0478: JCE: unauthenticated remote attackers could read some

JAVA accessible data via multiple protocols

* CVE-2015-0480: Tools: unauthenticated remote attackers could update,

insert or delete some JAVA accessible data via...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue remote code execution patch important java update openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2015-331=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

java-1_7_0-openjdk-1.7.0.79-7.4

java-1_7_0-openjdk-accessibility-1.7.0.79-7.4

java-1_7_0-openjdk-debuginfo-1.7.0.79-7.4

java-1_7_0-openjdk-debugsource-1.7.0.79-7.4

java-1_7_0-openjdk-demo-1.7.0.79-7.4

java-1_7_0-openjdk-demo-debuginfo-1.7.0.79-7.4

java-1_7_0-openjdk-devel-1.7.0.79-7.4

java-1_7_0-openjdk-devel-debuginfo-1.7.0.79-7.4

java-1_7_0-openjdk-headless-1.7.0.79-7.4

java-1_7_0-openjdk-headless-debuginfo-1.7.0.79-7.4

java-1_7_0-openjdk-src-1.7.0.79-7.4

- openSUSE 13.2 (noarch):

java-1_7_0-openjdk-javadoc-1.7.0.79-7.4

References

https://www.suse.com/security/cve/CVE-2015-0458.html

https://www.suse.com/security/cve/CVE-2015-0459.html

https://www.suse.com/security/cve/CVE-2015-0460.html

https://www.suse.com/security/cve/CVE-2015-0469.html

https://www.suse.com/security/cve/CVE-2015-0477.html

https://www.suse.com/security/cve/CVE-2015-0478.html

https://www.suse.com/security/cve/CVE-2015-0480.html

https://www.suse.com/security/cve/CVE-2015-0484.html

https://www.suse.com/security/cve/CVE-2015-0488.html

https://www.suse.com/security/cve/CVE-2015-0491.html

https://www.suse.com/security/cve/CVE-2015-0492.html

https://bugzilla.suse.com/927591

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:0774-1
Rating: important
Affected Products: openSUSE 13.2 .

Topics%20covered

Topics Covered

security advisory security issue remote code execution patch important java update openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.