SUSE Security Update: Security update for java-1_6_0-openjdk ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0762-1 Rating: critical References: #766802 Cross-References: CVE-2012-1711 CVE-2012-1713 CVE-2012-1716 CVE-2012-1717 CVE-2012-1719 CVE-2012-1723 CVE-2012-1724 CVE-2012-1725 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: java-1_6_0-openjdk was updated to the IcedTea 1.11.3 release, fixing multiple security issues: * S7079902, CVE-2012-1711: Refine CORBA data models * S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. * S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement * S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations * S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC * S7143872, CVE-2012-1718: Improve certificate extension processing * S7152811, CVE-2012-1723: Issues in client compiler * S7157609, CVE-2012-1724: Issues with loop * S7160757, CVE-2012-1725: Problem with hotspot/runtime_classfile Security Issue references: * CVE-2012-1725 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1725

* CVE-2012-1723 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1723

* CVE-2012-1713 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713

* CVE-2012-1716 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1716

* CVE-2012-1711 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1711

* CVE-2012-1724 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1724

* CVE-2012-1719 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1719

* CVE-2012-1717 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1717

Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-java-1_6_0-openjdk-6437 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-java-1_6_0-openjdk-6437 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.3.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.3.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.3.1 References: http://support.novell.com/security/cve/CVE-2012-1711.html http://support.novell.com/security/cve/CVE-2012-1713.html http://support.novell.com/security/cve/CVE-2012-1716.html http://support.novell.com/security/cve/CVE-2012-1717.html http://support.novell.com/security/cve/CVE-2012-1719.html http://support.novell.com/security/cve/CVE-2012-1723.html http://support.novell.com/security/cve/CVE-2012-1724.html http://support.novell.com/security/cve/CVE-2012-1725.html https://bugzilla.novell.com/766802 http://download.novell.com/patch/finder/?keywords=238a3f3249e53037791e1d8228... -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security-announce+help@opensuse.org