openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0309-1)

Critical Nessus Plugin ID 75871


The remote openSUSE host is missing a security update.


java-1_6_0-openjdk was updated to the b24 release, fixing multiple security issues :

dbg114-java-1_6_0-openjdk-5856 java-1_6_0-openjdk-5856 new_updateinfo Security fixes

- S7082299, CVE-2011-3571: Fix inAtomicReferenceArray

- S7088367, CVE-2011-3563: Fix issues in java sound

- S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method

- S7110687, CVE-2012-0503: Issues with TimeZone class

- S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass

- S7110704, CVE-2012-0506: Issues with some method in corba

- S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object

- S7118283, CVE-2012-0501: Better input parameter checking in zip file processing

- S7126960, CVE-2011-5035: (httpserver) Add property to limit number of request headers to the HTTP Server


Update the affected java-1_6_0-openjdk packages.

See Also

Plugin Details

Severity: Critical

ID: 75871

File Name: suse_11_4_java-1_6_0-openjdk-120222.nasl

Version: $Revision: 1.4 $

Type: local

Agent: unix

Published: 2014/06/13

Modified: 2015/08/06

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:java-1_6_0-openjdk, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-debuginfo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-debugsource, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-demo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-devel, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-devel-debuginfo, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-javadoc, p-cpe:/a:novell:opensuse:java-1_6_0-openjdk-src, cpe:/o:novell:opensuse:11.4

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2012/02/22

Reference Information

CVE: CVE-2011-3563, CVE-2011-3571, CVE-2011-5035, CVE-2012-0497, CVE-2012-0501, CVE-2012-0502, CVE-2012-0503, CVE-2012-0505, CVE-2012-0506

OSVDB: 78114, 78413, 79228, 79229, 79230, 79232, 79233, 79235, 79236