----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
SUSE update for Sun Java

SECUNIA ADVISORY ID:
SA29582

VERIFY ADVISORY:
http://secunia.com/advisories/29582/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Manipulation of data, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
SUSE Linux 10.1
http://secunia.com/product/10796/
openSUSE 10.3
http://secunia.com/product/16124/
openSUSE 10.2
http://secunia.com/product/13375/
SUSE Linux Enterprise Server 9
http://secunia.com/product/4118/
SUSE Linux Enterprise Server 10
http://secunia.com/product/12192/

SOFTWARE:
Novell Open Enterprise Server
http://secunia.com/product/4664/

DESCRIPTION:
SUSE has issued an update for Sun Java. This fixes some
vulnerabilities, which can be exploited by malicious people to cause
a DoS (Denial of Service), to bypass certain security restrictions,
or to compromise a vulnerable system.

For more information:
SA29239

SOLUTION:
Apply updated packages.

x86 Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-1.5.0_update15-0.1.i586.rpm
42bcb02a6ddd6337aeac8aaf2e977f8f

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-alsa-1.5.0_update15-0.1.i586.rpm
5ae4441d9a99bf4c91f18723aa09e366

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-demo-1.5.0_update15-0.1.i586.rpm
3a1584dfb028837f1e98e54bfcffd393

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-devel-1.5.0_update15-0.1.i586.rpm
337cd4974cd6b8df7a4b9136bdc5db31

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-jdbc-1.5.0_update15-0.1.i586.rpm
22b98ffb833c1774057e311413d7de2b

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-plugin-1.5.0_update15-0.1.i586.rpm
5eb7c7016cdfc3c522ba26cde4be8890

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-src-1.5.0_update15-0.1.i586.rpm
01605587588e215841dd83b6122d97e4

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-1.6.0.u5-0.1.i586.rpm
ca8ee44812b2c4a9e1dec52581e5d4f4

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-alsa-1.6.0.u5-0.1.i586.rpm
521ea4592a313e48e4248a9312da97df

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-debuginfo-1.6.0.u5-0.1.i586.rpm
2af9f8a87dbae929c18034784a1e3aac

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-demo-1.6.0.u5-0.1.i586.rpm
8c2264abbba199e369b2b7ef0dbdc42b

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-devel-1.6.0.u5-0.1.i586.rpm
04ba2d60e42d3bd76de999cd61472a05

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-jdbc-1.6.0.u5-0.1.i586.rpm
a9a22925ad21dd613fd57db8f3405eb8

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-plugin-1.6.0.u5-0.1.i586.rpm
f6489560b4c6aaf34e3b0e2975adcb18

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-1.4.2_update17-0.1.i586.rpm
fcd49bbe3b930010406bbe492c55e0a2

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-alsa-1.4.2_update17-0.1.i586.rpm
c14bac9e65f39b730e20943a2004423c

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-demo-1.4.2_update17-0.1.i586.rpm
a296bc41369cc96295bfb031385f1803

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-devel-1.4.2_update17-0.1.i586.rpm
a5a9ba9367bb029f89a5ef9452495f07

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-jdbc-1.4.2_update17-0.1.i586.rpm
522446b95c36ae5a1f32b966aa168ffc

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-plugin-1.4.2_update17-0.1.i586.rpm
f1e8c4acebf387d3912c71c232b2ec9e

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_4_2-sun-src-1.4.2_update17-0.1.i586.rpm
6c8208d0dfaaf6e32dced17fd00fafcf

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-1.5.0_update14-0.3.i586.rpm
ded086640bb25fbe24cf4a010123565e

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-alsa-1.5.0_update14-0.3.i586.rpm
26838cc9716235e5162478c2facf7e61

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-demo-1.5.0_update14-0.3.i586.rpm
d8983d1e7b689f48d776e15c734ee87d

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-devel-1.5.0_update14-0.3.i586.rpm
e379edf40f1e50228fda924aebc501ee

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-jdbc-1.5.0_update14-0.3.i586.rpm
753ddc4f245c58b595c1f0726dadfd14

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-plugin-1.5.0_update14-0.3.i586.rpm
1cbfba07586a599bd5cf56f9d8004191

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/java-1_5_0-sun-src-1.5.0_update14-0.3.i586.rpm
57ba05ef11dd538cb5555c3cf266fed2

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-1.4.2.17-0.2.i586.rpm
3f3d67bb205a7c2020d4b5c93f87d3a1

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-alsa-1.4.2.17-0.2.i586.rpm
6dddbbee877bf7004e1179d721d518bd

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-demo-1.4.2.17-0.2.i586.rpm
697e500f133c62bc1d1172a7a625177c

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-devel-1.4.2.17-0.2.i586.rpm
4eb8ebaf0e76bdb2d2578bb6d390da13

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-jdbc-1.4.2.17-0.2.i586.rpm
c93db103c1310d446a0a7e565058c0bc

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-plugin-1.4.2.17-0.2.i586.rpm
d951b45f2c8c957fe2eadc8788ed17ce

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_4_2-sun-src-1.4.2.17-0.2.i586.rpm
1115df81a4300123adb5351340152b41

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-1.5.0_15-0.1.i586.rpm
4b5b8584c77d337875b65e2c9196b276

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-alsa-1.5.0_15-0.1.i586.rpm
235724fee542d94ccc44a7d59d29809f

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-demo-1.5.0_15-0.1.i586.rpm
d846a6e6baa0f39bdc1544918e4d90cc

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-devel-1.5.0_15-0.1.i586.rpm
f49f92ec8fa4a00d630a93949b30fedd

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-jdbc-1.5.0_15-0.1.i586.rpm
d02c89490c9f308630637b63cd8f6bf5

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-plugin-1.5.0_15-0.1.i586.rpm
d153ed796d7af2aa7a64d91c54abf83e

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/java-1_5_0-sun-src-1.5.0_15-0.1.i586.rpm
eeb480c43a1b139bca404b7a0ffcb4ad

x86-64 Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_5_0-sun-1.5.0_update15-0.1.x86_64.rpm
a7f308517288091d33f296dce408ee3c

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_5_0-sun-alsa-1.5.0_update15-0.1.x86_64.rpm
ce24a935c96871ece7b6f49da9a9f2cb

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_5_0-sun-demo-1.5.0_update15-0.1.x86_64.rpm
6cf95f3b027411aadf5470a58042aa9b

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_5_0-sun-devel-1.5.0_update15-0.1.x86_64.rpm
e9eef1a76addafcefe2e4bd7d70b1ba6

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_5_0-sun-jdbc-1.5.0_update15-0.1.x86_64.rpm
e9f37cbeb113f8218a3d1eadcd87a174

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_5_0-sun-src-1.5.0_update15-0.1.x86_64.rpm
3ab907a7f47e2755553c22b1a3f953d1

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_6_0-sun-1.6.0.u5-0.1.x86_64.rpm
dd32e3dd06e62a9a50b66c4fccebff50

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_6_0-sun-alsa-1.6.0.u5-0.1.x86_64.rpm
453bc6703e224bb712f9d0d00141f568

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_6_0-sun-debuginfo-1.6.0.u5-0.1.x86_64.rpm
dde3cf07800e31af4db0ea1ffbd92a08

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_6_0-sun-demo-1.6.0.u5-0.1.x86_64.rpm
29c4e1862b69e73eefbd5839f17f11bb

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_6_0-sun-devel-1.6.0.u5-0.1.x86_64.rpm
5bbd76fc1025444ef1a39da6442205cc

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/java-1_6_0-sun-jdbc-1.6.0.u5-0.1.x86_64.rpm
810cb38b315f6b5249458ee5ee30ed45

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/java-1_5_0-sun-1.5.0_update14-0.3.x86_64.rpm
0aed19b8da86796375f9de7f5468ff9a

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/java-1_5_0-sun-alsa-1.5.0_update14-0.3.x86_64.rpm
43ddec5ce422076aed5d2ade5c7f92d9

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/java-1_5_0-sun-demo-1.5.0_update14-0.3.x86_64.rpm
723cc88472cf6cd2ca03a4bd9b55d36c

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/java-1_5_0-sun-devel-1.5.0_update14-0.3.x86_64.rpm
47243ca41390a7348815a24d8e2ac2ae

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/java-1_5_0-sun-jdbc-1.5.0_update14-0.3.x86_64.rpm
76f5d373f932f63db38956ad7c521832

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/java-1_5_0-sun-src-1.5.0_update14-0.3.x86_64.rpm
f4ee21a70fc34c14437ba091077d2048

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/java-1_5_0-sun-1.5.0_15-0.1.x86_64.rpm
b4d87e1cff5ea4fa1aad72b7d5482f57

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/java-1_5_0-sun-alsa-1.5.0_15-0.1.x86_64.rpm
7217fcd35d0ce64d35012fe1c7a7e4d7

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/java-1_5_0-sun-demo-1.5.0_15-0.1.x86_64.rpm
8403b4cd983a90cb48123dc083407e17

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/java-1_5_0-sun-devel-1.5.0_15-0.1.x86_64.rpm
649a9ee0868295de1dd052c68f5f7bb9

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/java-1_5_0-sun-jdbc-1.5.0_15-0.1.x86_64.rpm
fd3e628418c2708dd548325782c405d0

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/java-1_5_0-sun-src-1.5.0_15-0.1.x86_64.rpm
e1677584d65e5737a211d0f7a0dea624

Sources:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/java-1_5_0-sun-1.5.0_update15-0.1.nosrc.rpm
c78b0c26f21a7c4709f9dcd4e9dac2ae

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/java-1_6_0-sun-1.6.0.u5-0.1.nosrc.rpm
aa46f41f9bdc3da045a9399e1e4f9b96

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/java-1_4_2-sun-1.4.2_update17-0.1.nosrc.rpm
4148529c002a65009d3ce072e61bda80

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/java-1_5_0-sun-1.5.0_update14-0.3.nosrc.rpm
70286d813c9f20b2699abd431ec2cf4f

SUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/java-1_4_2-sun-1.4.2.17-0.2.nosrc.rpm
6a73de2cd7bd56a91d93de5b5504b116

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/java-1_5_0-sun-1.5.0_15-0.1.nosrc.rpm
c52045f0fc8659a6e1a04bf455fc868d

SUSE Linux Enterprise Server 10 SP1

http://support.novell.com/techcenter/psdb/574223d1ffcde352dd063081d2f81f3e.html

SUSE Linux Enterprise Desktop 10 SP1

http://support.novell.com/techcenter/psdb/574223d1ffcde352dd063081d2f81f3e.html

Open Enterprise Server

http://support.novell.com/techcenter/psdb/981c2591380984c2225999d768ea9e97.html

Novell Linux POS 9

http://support.novell.com/techcenter/psdb/981c2591380984c2225999d768ea9e97.html

Novell Linux Desktop 9

http://support.novell.com/techcenter/psdb/981c2591380984c2225999d768ea9e97.html

SUSE SLES 9

http://support.novell.com/techcenter/psdb/981c2591380984c2225999d768ea9e97.html

ORIGINAL ADVISORY:
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html

OTHER REFERENCES:
SA29239:
http://secunia.com/advisories/29239/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------