SUSE-SU-2015:1073-1
Security update for java-1_7_0-ibm
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update fixes the following security issues: - Version bump to 7.1-3.0 release bnc#930365 CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 - Fix removeing links before update-alternatives run. bnc#931702 - Fix bnc#912434, javaws/plugin stuff should slave plugin update-alternatives - Fix bnc#912447, use system cacerts - Update to 7.1.2.10 for sec issues bnc#916266 and bnc#916265 CVE-2014-8892 CVE-2014-8891
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | java-1_7_1-ibm, java-1_7_1-ibm-alsa, java-1_7_1-ibm-devel and 2 more | 1.7.1_sr3.0-11.1 |
Show all 5 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | java-1_7_1-ibm | 1.7.1_sr3.0-11.1 |
| SUSE Linux Enterprise 12 | java-1_7_1-ibm-alsa | 1.7.1_sr3.0-11.1 |
| SUSE Linux Enterprise 12 | java-1_7_1-ibm-devel | 1.7.1_sr3.0-11.1 |
| SUSE Linux Enterprise 12 | java-1_7_1-ibm-jdbc | 1.7.1_sr3.0-11.1 |
| SUSE Linux Enterprise 12 | java-1_7_1-ibm-plugin | 1.7.1_sr3.0-11.1 |
References
- https://bugzilla.suse.com/912434
- https://bugzilla.suse.com/912447
- https://bugzilla.suse.com/930365
- https://bugzilla.suse.com/931693
- https://bugzilla.suse.com/931702
- https://lists.suse.com/pipermail/sle-security-updates/2015-June/001442.html
- https://www.suse.com/security/cve/CVE-2015-0138/
- https://www.suse.com/security/cve/CVE-2015-0192/