Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 529
Alerts This Week
Warning Icon 1 529

SUSE 11-SP3 SUSE-SU-2017:1444-1 Important: Java-1_6_0-ibm Update

suse
Calendar Grey May 30, 2017
Dist Suse Esm H88
SUSE rolls out significant update for java-1_6_0-oracle, tackling 9 severe vulnerabilities and improving overall system safety standards.
An update that fixes 11 vulnerabilities is now available

Summary

This update for java-1_6_0-ibm fixes the following issues: - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification - CVE-2017-3533: OpenJDK: newline injection in the FTP client - CVE-2017-3544: OpenJDK: newline injection in the SMTP client - Version update to 6.0-16.40 bsc#1027038 CVE-2016-2183 Patch Instructions:

Topics%20covered

Topics Covered

security advisory important SUSE Linux Java update system patching

References

#1027038 #1038505

Cross- CVE-2016-2183 CVE-2016-9840 CVE-2016-9841

CVE-2016-9842 CVE-2016-9843 CVE-2017-1289

CVE-2017-3509 CVE-2017-3514 CVE-2017-3533

CVE-2017-3539 CVE-2017-3544

Affected Products:

SUSE Linux Enterprise Server 11-SP3-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

https://www.suse.com/security/cve/CVE-2016-2183.html

https://www.suse.com/security/cve/CVE-2016-9840.html

https://www.suse.com/security/cve/CVE-2016-9841.html

https://www.suse.com/security/cve/CVE-2016-9842.html

https://www.suse.com/security/cve/CVE-2016-9843.html

https://www.suse.com/security/cve/CVE-2017-1289.html

https://www.suse.com/security/cve/CVE-2017-3509.html

https://www.suse.com/security/cve/CVE-2017-3514.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1444-1
Rating: important

Topics%20covered

Topics Covered

security advisory important SUSE Linux Java update system patching

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.