openSUSE Security Update : java-1_6_0-openjdk (openSUSE-2012-136)

Critical Nessus Plugin ID 74558


The remote openSUSE host is missing a security update.


update to version 1.11.1 to fix several security issues :

- S7082299, CVE-2011-3571: Fix in AtomicReferenceArray

- S7088367, CVE-2011-3563: Fix issues in java sound

- S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method

- S7110687, CVE-2012-0503: Issues with TimeZone class

- S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass

- S7110704, CVE-2012-0506: Issues with some method in corba

- S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object

- S7118283, CVE-2012-0501: Better input parameter checking in zip file processing

- S7126960, CVE-2011-5035: (httpserver) Add property to limit number of request headers to the HTTP Server


Update the affected java-1_6_0-openjdk packages.

See Also

Plugin Details

Severity: Critical

ID: 74558

File Name: openSUSE-2012-136.nasl

Version: $Revision: 1.3 $

Type: local

Agent: unix

Published: 2014/06/13

Modified: 2015/01/13

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:java-1_6_0-openjdk, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-debuginfo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-debugsource, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-demo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-demo-debuginfo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-devel, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-devel-debuginfo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-javadoc, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-src, cpe:/o:novell:opensuse:12.1

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2012/02/20

Reference Information

CVE: CVE-2011-3563, CVE-2011-3571, CVE-2011-5035, CVE-2012-0497, CVE-2012-0501, CVE-2012-0502, CVE-2012-0503, CVE-2012-0505, CVE-2012-0506