Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2013:0456-2 Critical: Python Vulnerabilities Resolved

suse
Calendar Grey February 22, 2013
Scroller Suse
Crucial SuSE Patch for Java focusing on vital corrections and suggested steps for all users. Ensure your safety!
An update that contains security fixes can now be installed

Summary

java-1_6_0-openjdk has been updated to IcedTea 1.12.3 (bnc#804654) which contains security and bugfixes: * Security fixes o S8006446: Restrict MBeanServer access (CVE-2013-1486) o S8006777: Improve TLS handling of invalid messages Lucky 13 (CVE-2013-0169) o S8007688: Blacklist known bad certificate (issued by DigiCert) * Backports o S8007393: Possible race condition after JDK-6664509 o S8007611: logging behavior in applet changed * Bug fixes o PR1319: Support GIF lib v5. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-java-1_6_0-openjdk-7385 To bring your system up-to-date, use "zypper patch". Package List:

Topics%20covered

Topics Covered

security advisory important fix SUSE Linux Java security TLS improvements

References

#804654

Affected Products:

SUSE Linux Enterprise Desktop 11 SP2

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2013:0328-1
Rating: important

Topics%20covered

Topics Covered

security advisory important fix SUSE Linux Java security TLS improvements

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.