Upstream information
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient checks for cached results" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code.NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Note from the SUSE Security Team
This security problem affects also IBM Java on SUSE Linux Enterprise Server in various versions.IBM is still working on a fix currently. As soon as a fix is provided we will be shipping updated IBM Java packages.Please check the IBM JDK Alerts overview page for more information and the current IBM status. Novell Bugzilla entries: 798535, 803379, 806786 SUSE Security Advisories:- openSUSE-SU-2013:0377-1, published Fri, 1 Mar 2013 17:05:38 +0100 (CET)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Software Development Kit 11 SP2 |
| Builds SAT Patch Nr: 7454 |
| SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware |
| Builds SAT Patch Nr: 7454 |
| SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware |
| Builds SAT Patch Nr: 7454 |
| SUSE Linux Enterprise Server 11 SP2 |
| Builds SAT Patch Nr: 7454 |