Security update for IBM Java 1.4.2

SUSE Security Update: Security update for IBM Java 1.4.2
Announcement ID: SUSE-SU-2013:1293-2
Rating: important
References: #823034 #829212
Affected Products:
  • SUSE Linux Enterprise Server 11 SP1 for VMware LTSS
  • SUSE Linux Enterprise Server 11 SP1 LTSS
  • SUSE Linux Enterprise Server 10 SP3 LTSS

  • An update that contains security fixes can now be installed.

    Description:


    IBM Java 1.4.2 has been updated to SR13-FP18 to fix bugs
    and security issues:

    CVE-2013-3009, CVE-2013-3011, CVE-2013-3012, CVE-2013-2469,
    CVE-2013-2465, CVE-2013-2464, CVE-2013-2463, CVE-2013-2473,
    CVE-2013-2472, CVE-2013-2471, CVE-2013-2470, CVE-2013-2459,
    CVE-2013-2456, CVE-2013-2447, CVE-2013-2452, CVE-2013-2446,
    CVE-2013-2450, CVE-2013-1500

    Please see also
    http://www.ibm.com/developerworks/java/jdk/alerts/


    Also following bug has been fixed:

    * mark files in jre/bin and bin/ as executable
    (bnc#823034)

    Patch Instructions:

    To install this SUSE Security Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Linux Enterprise Server 11 SP1 for VMware LTSS:
      zypper in -t patch slessp1-java-1_4_2-ibm-8113
    • SUSE Linux Enterprise Server 11 SP1 LTSS:
      zypper in -t patch slessp1-java-1_4_2-ibm-8113

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586 x86_64):
    • java-1_4_2-ibm-1.4.2_sr13.18-0.4.1
    • SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586):
    • java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.4.1
    • java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.4.1
    • SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64):
    • java-1_4_2-ibm-1.4.2_sr13.18-0.4.1
    • SUSE Linux Enterprise Server 11 SP1 LTSS (i586):
    • java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.4.1
    • java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.4.1
    • SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64):
    • java-1_4_2-ibm-1.4.2_sr13.18-0.7.1
    • java-1_4_2-ibm-devel-1.4.2_sr13.18-0.7.1
    • SUSE Linux Enterprise Server 10 SP3 LTSS (i586):
    • java-1_4_2-ibm-jdbc-1.4.2_sr13.18-0.7.1
    • java-1_4_2-ibm-plugin-1.4.2_sr13.18-0.7.1

    References:

    • https://bugzilla.novell.com/823034
    • https://bugzilla.novell.com/829212
    • http://download.suse.com/patch/finder/?keywords=218af645ef5f0082097200b5e9788a5a
    • http://download.suse.com/patch/finder/?keywords=76ae3ed7fc780d986eebf8b71a352ade