Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
java-1_4_2-ibm
(any)
java-1_4_2-ibm-devel
(any)
java-1_4_2-ibm-jdbc
(any)
java-1_4_2-ibm-plugin
(any)
java-1_5_0-ibm
(any)
java-1_5_0-ibm-32bit
(any)
java-1_5_0-ibm-64bit
(any)
java-1_5_0-ibm-alsa
(any)
java-1_5_0-ibm-alsa-32bit
(any)
java-1_5_0-ibm-devel
(any)
java-1_5_0-ibm-devel-32bit
(any)
java-1_5_0-ibm-fonts
(any)
java-1_5_0-ibm-jdbc
(any)
java-1_5_0-ibm-plugin
(any)
Описание
Уведомление безопасности об уязвимостях UnitedLinux 1.0, SuSE Linux Enterprise Server 8, SuSE Linux Openexchange Server 4, SuSE Linux Standard Server 8, SuSE Linux School Server, SUSE LINUX Retail Solution 8, SUSE SLES 9, Open Enterprise Server, Novell Linux POS 9, SUSE Linux Enterprise Desktop 10 SP1, SLE SDK 10 SP1, SUSE Linux Enterprise Server 10 SP1
Как исправить
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 9:
s390x:
IBMJava2-JRE - 1.4.2-0.92.6
IBMJava2-SDK - 1.4.2-0.92.6
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
ppc64:
IBMJava2-JRE - 1.4.2-0.92.5
IBMJava2-SDK - 1.4.2-0.92.5
SUSE LINUX Enterprise Server 8:
s390x:
IBMJava2-SDK_1_4 - 1.4.2-0.22
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
x86_64:
java-1_4_2-ibm - 1.4.2_sr9-0.2
java-1_4_2-ibm-devel - 1.4.2_sr9-0.2
SUSE Linux Enterprise Desktop 10 SP1:
i586:
java-1_5_0-ibm - 1.5.0_sr5a-0.4
java-1_5_0-ibm-alsa - 1.5.0_sr5a-0.4
java-1_5_0-ibm-demo - 1.5.0_sr5a-0.4
java-1_5_0-ibm-devel - 1.5.0_sr5a-0.4
java-1_5_0-ibm-jdbc - 1.5.0_sr5a-0.4
java-1_5_0-ibm-plugin - 1.5.0_sr5a-0.4
java-1_5_0-ibm-src - 1.5.0_sr5a-0.4
SUSE Linux Enterprise Server 10 SP1:
i586:
java-1_5_0-ibm - 1.5.0_sr5a-0.4
java-1_5_0-ibm-alsa - 1.5.0_sr5a-0.4
java-1_5_0-ibm-devel - 1.5.0_sr5a-0.4
java-1_5_0-ibm-fonts - 1.5.0_sr5a-0.4
java-1_5_0-ibm-jdbc - 1.5.0_sr5a-0.4
java-1_5_0-ibm-plugin - 1.5.0_sr5a-0.4
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
i586:
IBMJava2-JRE - 1.3.1-246
IBMJava2-SDK - 1.3.1-246
IBMJava2-JRE_1_4 - 1.4.2-0.22
IBMJava2-SDK_1_4 - 1.4.2-0.22
SUSE Linux Enterprise Server 9:
s390x:
IBMJava2-JRE - 1.4.2-0.92.6
IBMJava2-SDK - 1.4.2-0.92.6
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
ppc64:
IBMJava2-JRE - 1.4.2-0.92.5
IBMJava2-SDK - 1.4.2-0.92.5
SUSE LINUX Enterprise Server 8:
s390x:
IBMJava2-SDK_1_4 - 1.4.2-0.22
SUSE Linux Enterprise Server 10 SP1, SUSE Linux Enterprise 10 Software Development Kit:
x86_64:
java-1_4_2-ibm - 1.4.2_sr9-0.2
java-1_4_2-ibm-devel - 1.4.2_sr9-0.2
SUSE Linux Enterprise Desktop 10 SP1:
i586:
java-1_5_0-ibm - 1.5.0_sr5a-0.4
java-1_5_0-ibm-alsa - 1.5.0_sr5a-0.4
java-1_5_0-ibm-demo - 1.5.0_sr5a-0.4
java-1_5_0-ibm-devel - 1.5.0_sr5a-0.4
java-1_5_0-ibm-jdbc - 1.5.0_sr5a-0.4
java-1_5_0-ibm-plugin - 1.5.0_sr5a-0.4
java-1_5_0-ibm-src - 1.5.0_sr5a-0.4
SUSE Linux Enterprise Server 10 SP1:
i586:
java-1_5_0-ibm - 1.5.0_sr5a-0.4
java-1_5_0-ibm-alsa - 1.5.0_sr5a-0.4
java-1_5_0-ibm-devel - 1.5.0_sr5a-0.4
java-1_5_0-ibm-fonts - 1.5.0_sr5a-0.4
java-1_5_0-ibm-jdbc - 1.5.0_sr5a-0.4
java-1_5_0-ibm-plugin - 1.5.0_sr5a-0.4
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
i586:
IBMJava2-JRE - 1.3.1-246
IBMJava2-SDK - 1.3.1-246
IBMJava2-JRE_1_4 - 1.4.2-0.22
IBMJava2-SDK_1_4 - 1.4.2-0.22
Ссылки
https://www.suse.com/support/security/advisories/2007_56_ibmjava.html
Источник: CVE
Наименование: CVE-2007-3922
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3922
Источник: CVE
Наименование: CVE-2007-3655
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3655
Источник: CVE
Наименование: CVE-2007-2789
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2789
Источник: CVE
Наименование: CVE-2007-3005
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3005
Источник: CVE
Наименование: CVE-2007-3004
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3004
Источник: CVE
Наименование: CVE-2007-2788
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2788
Источник: CVE
Наименование: CVE-2007-3922
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3922
Источник: CVE
Наименование: CVE-2007-3655
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3655
Источник: CVE
Наименование: CVE-2007-2789
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2789
Источник: CVE
Наименование: CVE-2007-3005
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3005
Источник: CVE
Наименование: CVE-2007-3004
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3004
Источник: CVE
Наименование: CVE-2007-2788
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2788