---------------------------------------------------------------------- Did you know that a change in our assessment rating, exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list? Click here to learn more: http://secunia.com/advisories/business_solutions/ ---------------------------------------------------------------------- TITLE: SUSE update for Sun Java SECUNIA ADVISORY ID: SA33457 VERIFY ADVISORY: http://secunia.com/advisories/33457/ CRITICAL: Highly critical IMPACT: Security Bypass, Exposure of system information, Exposure of sensitive information, DoS, System access WHERE: >From remote OPERATING SYSTEM: openSUSE 11.1 http://secunia.com/advisories/product/20823/ openSUSE 11.0 http://secunia.com/advisories/product/19180/ openSUSE 10.3 http://secunia.com/advisories/product/16124/ SUSE Linux Enterprise Server 10 http://secunia.com/advisories/product/12192/ SUSE Linux Enterprise Server 9 http://secunia.com/advisories/product/4118/ SOFTWARE: Novell Open Enterprise Server 1.x http://secunia.com/advisories/product/4664/ DESCRIPTION: SUSE has issued an update for Sun Java. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, cause a DoS (Denial of service), or compromise a vulnerable system. For more information: SA32991 SOLUTION: Apply updated packages. x86 Platform: openSUSE 11.1: http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_5_0-sun-1.5.0_update17-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_5_0-sun-alsa-1.5.0_update17-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_5_0-sun-devel-1.5.0_update17-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_5_0-sun-jdbc-1.5.0_update17-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_5_0-sun-plugin-1.5.0_update17-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_6_0-sun-1.6.0.u11-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_6_0-sun-alsa-1.6.0.u11-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_6_0-sun-devel-1.6.0.u11-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_6_0-sun-jdbc-1.6.0.u11-1.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/java-1_6_0-sun-plugin-1.6.0.u11-1.1.i586.rpm openSUSE 11.0: http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-demo-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-devel-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_5_0-sun-src-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_6_0-sun-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_6_0-sun-demo-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_6_0-sun-devel-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/java-1_6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-alsa-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-demo-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-devel-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-jdbc-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-plugin-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_5_0-sun-src-1.5.0_update17-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-alsa-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-debuginfo-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-demo-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-devel-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-jdbc-1.6.0.u11-0.1.i586.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/java-1_6_0-sun-plugin-1.6.0.u11-0.1.i586.rpm Sources: openSUSE 11.1: http://download.opensuse.org/pub/opensuse/update/11.1/rpm/src/java-1_5_0-sun-1.5.0_update17-1.1.nosrc.rpm http://download.opensuse.org/pub/opensuse/update/11.1/rpm/src/java-1_6_0-sun-1.6.0.u11-1.1.nosrc.rpm openSUSE 11.0: http://download.opensuse.org/pub/opensuse/update/11.0/rpm/src/java-1_5_0-sun-1.5.0_update17-0.1.nosrc.rpm http://download.opensuse.org/pub/opensuse/update/11.0/rpm/src/java-1_6_0-sun-1.6.0.u11-0.1.nosrc.rpm openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/java-1_5_0-sun-1.5.0_update17-0.1.nosrc.rpm http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/java-1_6_0-sun-1.6.0.u11-0.1.nosrc.rpm Open Enterprise Server http://download.novell.com/index.jsp?search=Search&keywords=f60c68e2df1e78d3d322957d0b5749a0 Novell Linux POS 9 http://download.novell.com/index.jsp?search=Search&keywords=f60c68e2df1e78d3d322957d0b5749a0 Novell Linux Desktop 9 http://download.novell.com/index.jsp?search=Search&keywords=f60c68e2df1e78d3d322957d0b5749a0 SUSE SLES 9 http://download.novell.com/index.jsp?search=Search&keywords=f60c68e2df1e78d3d322957d0b5749a0 SUSE Linux Enterprise Server 10 SP2 http://download.novell.com/index.jsp?search=Search&keywords=3a14f0adb0cbe694628766407fbce0c7 SUSE Linux Enterprise Desktop 10 SP2 http://download.novell.com/index.jsp?search=Search&keywords=3a14f0adb0cbe694628766407fbce0c7 ORIGINAL ADVISORY: SUSE-SA:2009:001: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00001.html OTHER REFERENCES: SA32991: http://secunia.com/advisories/32991/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------