Upstream information
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of "privileges of the code" that bypasses the sandbox.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
National Vulnerability Database | |
---|---|
Base Score | 10 |
Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
Note from the SUSE Security Team
This security problem affects also IBM Java on SUSE Linux Enterprise Server in various versions.IBM is still working on a fix currently. As soon as a fix is provided we will be shipping updated IBM Java packages.Please check the IBM JDK Alerts overview page for more information and the current IBM status. SUSE Bugzilla entries: 798535 [RESOLVED / FIXED], 806786 [RESOLVED / UPSTREAM] No SUSE Security Announcements cross referenced.List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Module for Legacy Software 12 |
| Patchnames: SUSE Linux Enterprise Module for Legacy Software 12 GA java-1_6_0-ibm |
SUSE Linux Enterprise Server 11 SP1-LTSS |
| Patchnames: slessp1-java-1_6_0-ibm |
SUSE Linux Enterprise Server 11 SP2 |
| Patchnames: slessp2-java-1_6_0-ibm slessp2-java-1_7_0-ibm |
SUSE Linux Enterprise Server 11 SP3 |
| Patchnames: SUSE Linux Enterprise Server 11 SP3 GA java-1_6_0-ibm SUSE Linux Enterprise Server 11 SP3 GA java-1_7_0-ibm |
SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS |
| Patchnames: slessp1-java-1_6_0-ibm |
SUSE Linux Enterprise Server for SAP Applications 11 SP2 |
| Patchnames: slessp2-java-1_6_0-ibm slessp2-java-1_7_0-ibm |
SUSE Linux Enterprise Server for VMWare 11 SP2 |
| Patchnames: slessp2-java-1_6_0-ibm slessp2-java-1_7_0-ibm |
SUSE Linux Enterprise Software Development Kit 11 SP2 |
| Patchnames: sdksp2-java-1_6_0-ibm sdksp2-java-1_7_0-ibm |
SUSE Linux Enterprise Server 10 SP3 LTSS for x86 |
|
Builds ZYPP Patch Nr: 8497 |
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit |
|
Builds ZYPP Patch Nr: 8497 |
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T |
|
Builds ZYPP Patch Nr: 8497 |
SUSE CORE 9 for AMD64 and Intel EM64T SUSE CORE 9 for IBM S/390 31bit SUSE CORE 9 for IBM zSeries 64bit SUSE CORE 9 for x86 |
|
Builds YOU Patch Nr: 12936 |
SUSE Linux Enterprise Server 11 SP1 LTSS |
|
Builds SAT Patch Nr: 7482 |
SUSE Linux Enterprise Server 11 SP1 LTSS |
|
Builds SAT Patch Nr: 7482 |
SUSE Linux Enterprise Server 11 SP1 LTSS |
|
Builds SAT Patch Nr: 7482 |
SUSE Linux Enterprise Server 10 SP3 LTSS for x86 |
|
Builds ZYPP Patch Nr: 8494 |
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit |
|
Builds ZYPP Patch Nr: 8494 |
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T |
|
Builds ZYPP Patch Nr: 8494 |
SUSE Linux Enterprise Server 10 SP4 for x86 |
|
Builds ZYPP Patch Nr: 8495 |
SUSE Linux Enterprise Server 10 SP4 for IBM POWER |
|
Builds ZYPP Patch Nr: 8495 |
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit |
|
Builds ZYPP Patch Nr: 8495 |
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T |
|
Builds ZYPP Patch Nr: 8495 |
SUSE Linux Enterprise Software Development Kit 11 SP2 |
|
Builds SAT Patch Nr: 7454 |
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware |
|
Builds SAT Patch Nr: 7454 |
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware |
|
Builds SAT Patch Nr: 7454 |
SUSE Linux Enterprise Server 11 SP2 |
|
Builds SAT Patch Nr: 7454 |
SUSE Linux Enterprise Desktop 10 SP4 for x86 |
|
Builds ZYPP Patch Nr: 8483 |
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T |
|
Builds ZYPP Patch Nr: 8483 |
SUSE Linux Enterprise Server 10 SP4 for x86 |
|
Builds ZYPP Patch Nr: 8483 |
SUSE Linux Enterprise Server 10 SP4 for IBM POWER |
|
Builds ZYPP Patch Nr: 8483 |
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit |
|
Builds ZYPP Patch Nr: 8483 |
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T |
|
Builds ZYPP Patch Nr: 8483 |
SUSE Linux Enterprise Software Development Kit 11 SP2 |
|
Builds SAT Patch Nr: 7481 |
SUSE Linux Enterprise Software Development Kit 11 SP2 |
|
Builds SAT Patch Nr: 7481 |
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware |
|
Builds SAT Patch Nr: 7481 |
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware |
|
Builds SAT Patch Nr: 7481 |
SUSE Linux Enterprise Server 11 SP2 |
|
Builds SAT Patch Nr: 7481 |