SUSE Security Update: Security update for IBM Java
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:1204-1
Rating:             important
References:         #666744 #771808 #773021 #778629 
Cross-References:   CVE-2012-1713 CVE-2012-1716 CVE-2012-1717
                    CVE-2012-1718 CVE-2012-1719 CVE-2012-1725
                   
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4
                    SUSE Linux Enterprise Java 10 SP4
                    SUSE Linux Enterprise Desktop 10 SP4
______________________________________________________________________________

   An update that fixes 6 vulnerabilities is now available.

Description:


   IBM Java 1.5.0 was updated to SR14 fixing bugs and security
   issues.

   https://www.ibm.com/support/pages/java-sdk/
   

   Also three bugs have been fixed:

   * fix bnc#771808: create symlink /usr/bin/javaws
   properly
   * fix bnc#666744: mark all configuration files as
   %config(noreplace)
   * fix bnc#773021: add code removing fonts symlink to
   baselibs.conf

   Security Issue references:

   * CVE-2012-1717
   
   * CVE-2012-1716
   
   * CVE-2012-1713
   
   * CVE-2012-1719
   
   * CVE-2012-1718
   
   * CVE-2012-1725
   



Package List:

   - SUSE Linux Enterprise Server 10 SP4 (i586 ppc s390x x86_64):

      java-1_5_0-ibm-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-devel-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-fonts-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64):

      java-1_5_0-ibm-32bit-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-devel-32bit-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Server 10 SP4 (i586 ppc):

      java-1_5_0-ibm-jdbc-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-plugin-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Server 10 SP4 (x86_64):

      java-1_5_0-ibm-alsa-32bit-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Server 10 SP4 (i586):

      java-1_5_0-ibm-alsa-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Server 10 SP4 (ppc):

      java-1_5_0-ibm-64bit-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Java 10 SP4 (i586 ppc s390x x86_64):

      java-1_5_0-ibm-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-devel-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-fonts-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Java 10 SP4 (ppc):

      java-1_5_0-ibm-jdbc-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-plugin-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):

      java-1_5_0-ibm-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-demo-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-devel-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-fonts-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-src-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Desktop 10 SP4 (x86_64):

      java-1_5_0-ibm-32bit-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-alsa-32bit-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-devel-32bit-1.5.0_sr14.0-0.9.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586):

      java-1_5_0-ibm-alsa-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-jdbc-1.5.0_sr14.0-0.9.1
      java-1_5_0-ibm-plugin-1.5.0_sr14.0-0.9.1


References:

   https://www.suse.com/security/cve/CVE-2012-1713.html
   https://www.suse.com/security/cve/CVE-2012-1716.html
   https://www.suse.com/security/cve/CVE-2012-1717.html
   https://www.suse.com/security/cve/CVE-2012-1718.html
   https://www.suse.com/security/cve/CVE-2012-1719.html
   https://www.suse.com/security/cve/CVE-2012-1725.html
   https://bugzilla.novell.com/666744
   https://bugzilla.novell.com/771808
   https://bugzilla.novell.com/773021
   https://bugzilla.novell.com/778629
   https://login.microfocus.com/nidp/app/login