SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 8090)

This script is Copyright (C) 2013 Tenable Network Security, Inc.

Synopsis :

The remote SuSE 11 host is missing one or more security updates.

Description :

This update to icedtea-2.4.1 fixes various security issues :

- S6741606, CVE-2013-2407: Integrate Apache Santuario

- S7158805, CVE-2013-2445: Better rewriting of nested
subroutine calls

- S7170730, CVE-2013-2451: Improve Windows network stack

- S8000638, CVE-2013-2450: Improve deserialization

- S8000642, CVE-2013-2446: Better handling of objects for

- S8001033, CVE-2013-2452: Refactor network address
handling in virtual machine identifiers

- S8001034, CVE-2013-1500: Memory management improvements

- S8001038, CVE-2013-2444: Resourcefully handle resources

- S8001318, CVE-2013-2447: Socket.getLocalAddress not
consistent with InetAddress.getLocalHost

- S8001330, CVE-2013-2443: Improve on checking order
(non-Zero builds only)

- S8003703, CVE-2013-2412: Update RMI connection dialog

- S8004288, CVE-2013-2449: (fs) Files.probeContentType

- S8006328, CVE-2013-2448: Improve robustness of sound

- S8007812, CVE-2013-2455: (reflect)
Class.getEnclosingMethod problematic for some classes

- S8008120, CVE-2013-2457: Improve JMX class checking

- S8008124, CVE-2013-2453: Better compliance testing

- S8008132, CVE-2013-2456: Better serialization support

- S8008744, CVE-2013-2407: Rework part of fix for

- S8009057, CVE-2013-2448: Improve MIDI event handling

- S8009071, CVE-2013-2459: Improve shape handling

- S8009424, CVE-2013-2458: Adapt Nashorn to JSR-292
implementation change

- S8009554, CVE-2013-2454: Improve

- S8010209, CVE-2013-2460: Better provision of factories

- S8011243, CVE-2013-2470: Improve ImagingLib

- S8011248, CVE-2013-2471: Better Component Rasters

- S8011253, CVE-2013-2472: Better Short Component Rasters

- S8011257, CVE-2013-2473: Better Byte Component Rasters

- S8012375, CVE-2013-1571: Improve Javadoc framing

- S8012438, CVE-2013-2463: Better image validation

- S8012597, CVE-2013-2465: Better image channel

- S8012601, CVE-2013-2469: Better validation of image

- S8014281, CVE-2013-2461: Better checking of XML

See also :

Solution :

Apply SAT patch number 8090.

Risk factor :

Critical / CVSS Base Score : 10.0
Public Exploit Available : true