SUSE-SU-2014:0215-1: moderate: Security update for openjdk

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for openjdk
______________________________________________________________________________

Announcement ID:    SUSE-SU-2014:0215-1
Rating:             moderate
References:         #858818 
Cross-References:   CVE-2013-5878 CVE-2013-5884 CVE-2013-5893
                    CVE-2013-5896 CVE-2013-5907 CVE-2013-5910
                    CVE-2014-0368 CVE-2014-0373 CVE-2014-0376
                    CVE-2014-0411 CVE-2014-0416 CVE-2014-0422
                    CVE-2014-0423 CVE-2014-0428
Affected Products:
                    SUSE Linux Enterprise Desktop 11 SP3
______________________________________________________________________________

   An update that fixes 14 vulnerabilities is now available.

Description:


   This openjdk update fixes several security issues. For a
   complete list of  fixed vulnerabilities and their
   description please refer to:

   http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2014-J
   anuary/025800.html
   <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2014-
   January/025800.html>

   Security Issue references:

   * CVE-2013-5878
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5878
   >
   * CVE-2013-5884
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5884
   >
   * CVE-2013-5893
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5893
   >
   * CVE-2013-5896
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5896
   >
   * CVE-2013-5907
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5907
   >
   * CVE-2013-5910
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5910
   >
   * CVE-2014-0368
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0368
   >
   * CVE-2014-0373
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0373
   >
   * CVE-2014-0376
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0376
   >
   * CVE-2014-0411
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0411
   >
   * CVE-2014-0416
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0416
   >
   * CVE-2014-0422
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0422
   >
   * CVE-2014-0423
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0423
   >
   * CVE-2014-0428
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428
   >


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Desktop 11 SP3:

      zypper in -t patch sledsp3-java-1_7_0-openjdk-8874

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64):

      java-1_7_0-openjdk-1.7.0.6-0.23.1
      java-1_7_0-openjdk-demo-1.7.0.6-0.23.1
      java-1_7_0-openjdk-devel-1.7.0.6-0.23.1


References:

   http://support.novell.com/security/cve/CVE-2013-5878.html
   http://support.novell.com/security/cve/CVE-2013-5884.html
   http://support.novell.com/security/cve/CVE-2013-5893.html
   http://support.novell.com/security/cve/CVE-2013-5896.html
   http://support.novell.com/security/cve/CVE-2013-5907.html
   http://support.novell.com/security/cve/CVE-2013-5910.html
   http://support.novell.com/security/cve/CVE-2014-0368.html
   http://support.novell.com/security/cve/CVE-2014-0373.html
   http://support.novell.com/security/cve/CVE-2014-0376.html
   http://support.novell.com/security/cve/CVE-2014-0411.html
   http://support.novell.com/security/cve/CVE-2014-0416.html
   http://support.novell.com/security/cve/CVE-2014-0422.html
   http://support.novell.com/security/cve/CVE-2014-0423.html
   http://support.novell.com/security/cve/CVE-2014-0428.html
   https://bugzilla.novell.com/858818
   http://download.novell.com/patch/finder/?keywords=85809a369b01edda00b6df0fabb730e7