Upstream information
Description
The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entry: 456770 SUSE Security Advisories:- SUSE-SA:2009:001, published Fri, 09 Jan 2009 15:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86 |
| sled10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sles10-sp2.x86 ZYPP Patch Nr: 5852 |
| SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for x86 |
| sled10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sles10-sp2.x86 ZYPP Patch Nr: 5852 |
| SUSE Linux Enterprise Server 10 SP2 for IPF |
| sled10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sles10-sp2.x86 ZYPP Patch Nr: 5852 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12799 |
| openSUSE 10.3 |
| |
| openSUSE 10.3 |
| |
| Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 Novell Linux POS 9 Open Enterprise Server SUSE CORE 9 for AMD64 and Intel EM64T SUSE CORE 9 for Itanium Processor Family SUSE CORE 9 for x86 |
| sles9-nlpos.x86 core9.x86-64 core9.x86 sles9-nld.x86 sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12321 |