Уведомление безопасности SUSE-SU-2014:0733-1: обновление IBM Java

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

SUSE

java-1_7_0-ibm (any) java-1_7_0-ibm-alsa (any) java-1_7_0-ibm-devel (any) java-1_7_0-ibm-jdbc (any) java-1_7_0-ibm-plugin (any)

IBM Java обновлен до версии SR7; в новой версии устранены уязвимости и ошибки.

   Более подробная информация доступна по адресу:
http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR7http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR7">http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR7 />    <http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR7>http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR7">http://www.ibm.com/developerworks/java/jdk/aix/j764/Java7_64.fixes.html#SR7> />
   Ссылки на описания уязвимостей:

       * CVE-2013-6629
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629> />        * CVE-2013-6954
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954> />        * CVE-2014-0429
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0429>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0429">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0429> />        * CVE-2014-0446
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0446>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0446">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0446> />        * CVE-2014-0448
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0448>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0448">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0448> />        * CVE-2014-0449
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0449>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0449">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0449> />        * CVE-2014-0451
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0451>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0451">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0451> />        * CVE-2014-0452
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0452>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0452">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0452> />        * CVE-2014-0457
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0457>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0457">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0457> />        * CVE-2014-0458
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0458>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0458">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0458> />        * CVE-2014-0459
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0459>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0459">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0459> />        * CVE-2014-0460
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460> />        * CVE-2014-0461
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0461>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0461">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0461> />        * CVE-2014-1876
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1876>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1876">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1876> />        * CVE-2014-2398
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2398>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2398">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2398> />        * CVE-2014-2401
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2401>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2401">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2401> />        * CVE-2014-2402
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2402>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2402">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2402> />        * CVE-2014-2409
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2409>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2409">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2409> />        * CVE-2014-2412
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2412>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2412">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2412> />        * CVE-2014-2414
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2414>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2414">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2414> />        * CVE-2014-2420
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2420>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2420">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2420> />        * CVE-2014-2421
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2421>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2421">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2421> />        * CVE-2014-2423
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423> />        * CVE-2014-2427
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2427>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2427">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2427> />        * CVE-2014-2428
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2428>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2428">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2428> />        * CVE-2014-0455
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0455>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0455">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0455> />        * CVE-2014-0428
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428> />        * CVE-2014-0453
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0453>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0453">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0453> />        * CVE-2014-0454
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0454>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0454">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0454> />        * CVE-2014-0878
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0878>">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0878">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0878>

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 11 SP2 LTSS:
i586, s390x, x86_64:
java-1_7_0-ibm-devel - 1.7.0_sr7.0-0.5.1
java-1_7_0-ibm-jdbc - 1.7.0_sr7.0-0.5.1
java-1_7_0-ibm - 1.7.0_sr7.0-0.5.1

http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00017.html
https://bugzilla.novell.com/877429
http://download.suse.com/patch/finder/?keywords=b4c561518a2b8e396c17cfe8ee6dd5bf

Источник: CVE
Наименование: CVE-2014-2401
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2401

Источник: CVE
Наименование: CVE-2014-2428
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2428

Источник: CVE
Наименование: CVE-2014-0446
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0446

Источник: CVE
Наименование: CVE-2014-2427
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2427

Источник: CVE
Наименование: CVE-2014-2420
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2420

Источник: CVE
Наименование: CVE-2014-2421
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2421

Источник: CVE
Наименование: CVE-2014-0428
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428

Источник: CVE
Наименование: CVE-2014-0429
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0429

Источник: CVE
Наименование: CVE-2014-2414
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2414

Источник: CVE
Наименование: CVE-2014-2402
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2402

Источник: CVE
Наименование: CVE-2014-2412
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2412

Источник: CVE
Наименование: CVE-2014-2423
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2423

Источник: CVE
Наименование: CVE-2014-0878
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0878

Источник: CVE
Наименование: CVE-2014-2409
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2409

Источник: CVE
Наименование: CVE-2013-6954
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954

Источник: CVE
Наименование: CVE-2014-1876
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1876

Источник: CVE
Наименование: CVE-2014-2398
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2398

Источник: CVE
Наименование: CVE-2013-6629
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629

Источник: CVE
Наименование: CVE-2014-0457
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0457

Источник: CVE
Наименование: CVE-2014-0455
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0455

Источник: CVE
Наименование: CVE-2014-0454
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0454

Источник: CVE
Наименование: CVE-2014-0453
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0453

Источник: CVE
Наименование: CVE-2014-0452
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0452

Источник: CVE
Наименование: CVE-2014-0451
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0451

Источник: CVE
Наименование: CVE-2014-0448
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0448

Источник: CVE
Наименование: CVE-2014-0449
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0449

Источник: CVE
Наименование: CVE-2014-0460
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0460

Источник: CVE
Наименование: CVE-2014-0461
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0461

Источник: CVE
Наименование: CVE-2014-0459
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0459

Источник: CVE
Наименование: CVE-2014-0458
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0458