Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2014:1549-1 Critical: Java Security Update for Integrity Issues

suse
Calendar Grey December 3, 2014
Scroller Suse
The latest patch resolves 21 vulnerabilities in java-1_7_1-ibm for SUSE Linux Enterprise, boosting both security and data privacy.
An update that fixes 21 vulnerabilities is now available

Summary

java-1_7_1-ibm was updated to version 1.7.1_sr1.2 to fix 21 security issues. These security issues were fixed: - Unspecified vulnerability in Oracle Java (CVE-2014-3065). - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue (CVE-2014-3566). - Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT (CVE-2014-6513). - Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via

Topics%20covered

Topics Covered

security advisory critical issue software update SUSE confidentiality Java security integrity

References

#901223 #901239 #904889

Cross- CVE-2014-3065 CVE-2014-3566 CVE-2014-4288

CVE-2014-6456 CVE-2014-6457 CVE-2014-6458

CVE-2014-6466 CVE-2014-6476 CVE-2014-6492

CVE-2014-6493 CVE-2014-6502 CVE-2014-6503

CVE-2014-6506 CVE-2014-6511 CVE-2014-6512

CVE-2014-6513 CVE-2014-6515 CVE-2014-6527

CVE-2014-6531 CVE-2014-6532 CVE-2014-6558

Affected Products:

SUSE Linux Enterprise Software Development Kit 12

SUSE Linux Enterprise Server 12

https://www.suse.com/security/cve/CVE-2014-3065.html

https://www.suse.com/security/cve/CVE-2014-3566.html

https://www.suse.com/security/cve/CVE-2014-4288.html

https://www.suse.com/security/cve/CVE-2014-6456.html

https://www.suse.com/security/cve/CVE-2014-6457.html

https://www.suse.com/security/cve/CVE-2014-6458.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:1549-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical issue software update SUSE confidentiality Java security integrity

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.