SUSE Security Update: Security update for IBM Java 1.4.2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:1293-2
Rating:             important
References:         #823034 #829212 
Affected Products:
                    SUSE Linux Enterprise Server 11 SP1 for VMware LTSS
                    SUSE Linux Enterprise Server 11 SP1 LTSS
                    SUSE Linux Enterprise Server 10 SP3 LTSS
______________________________________________________________________________

   An update that contains security fixes can now be installed.

Description:


   IBM Java 1.4.2 has been updated to SR13-FP18 to fix bugs
   and security  issues:

   CVE-2013-3009, CVE-2013-3011, CVE-2013-3012, CVE-2013-2469,
   CVE-2013-2465, CVE-2013-2464, CVE-2013-2463, CVE-2013-2473,
   CVE-2013-2472, CVE-2013-2471, CVE-2013-2470, CVE-2013-2459,
   CVE-2013-2456, CVE-2013-2447, CVE-2013-2452, CVE-2013-2446,
   CVE-2013-2450, CVE-2013-1500

   Please see also
   https://www.ibm.com/support/pages/java-sdk/
   

   Also following bug has been fixed:

   * mark files in jre/bin and bin/ as executable
   (bnc#823034)


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS:

      zypper in -t patch slessp1-java-1_4_2-ibm-8113

   - SUSE Linux Enterprise Server 11 SP1 LTSS:

      zypper in -t patch slessp1-java-1_4_2-ibm-8113

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586 x86_64):

      java-1_4_2-ibm-1.4.2_sr13.18-0.4.1

   - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586):

      java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.4.1
      java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.4.1

   - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64):

      java-1_4_2-ibm-1.4.2_sr13.18-0.4.1

   - SUSE Linux Enterprise Server 11 SP1 LTSS (i586):

      java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.4.1
      java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.4.1

   - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64):

      java-1_4_2-ibm-1.4.2_sr13.18-0.7.1
      java-1_4_2-ibm-devel-1.4.2_sr13.18-0.7.1

   - SUSE Linux Enterprise Server 10 SP3 LTSS (i586):

      java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.7.1
      java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.7.1


References:

   https://bugzilla.novell.com/823034
   https://bugzilla.novell.com/829212
   https://login.microfocus.com/nidp/app/login
   https://login.microfocus.com/nidp/app/login