openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)

This script is Copyright (C) 2010-2014 Tenable Network Security, Inc.


Synopsis :

The remote openSUSE host is missing a security update.

Description :

Sun Java 1.6.0 was updated to Security Update U22.

The release notes for this release are on:
http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121.
html

Security advisory page for this update:
http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625
8.html

Following CVEs are tracked by the update: CVE-2010-3556 CVE-2010-3562
CVE-2010-3565 CVE-2010-3566 CVE-2010-3567 CVE-2010-3571 CVE-2010-3554
CVE-2010-3563 CVE-2010-3568 CVE-2010-3569 CVE-2010-3558 CVE-2010-3552
CVE-2010-3559 CVE-2010-3572 CVE-2010-3553 CVE-2010-3555 CVE-2010-3550
CVE-2010-3570 CVE-2010-3561 CVE-2009-3555 CVE-2010-1321 CVE-2010-3549
CVE-2010-3557 CVE-2010-3541 CVE-2010-3573 CVE-2010-3574 CVE-2010-3548
CVE-2010-3551 CVE-2010-3560

See also :

http://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html
http://www.nessus.org/u?ec585d60
http://www.nessus.org/u?bc96963b
https://bugzilla.novell.com/show_bug.cgi?id=646073

Solution :

Update the affected java-1_6_0-sun packages.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
Public Exploit Available : true