SuSE: 2013:1254-1: important: java-1_7_0-openjdk
Summary
This update to icedtea-2.4.1 fixes various security issues:
* S6741606, CVE-2013-2407: Integrate Apache Santuario
* S7158805, CVE-2013-2445: Better rewriting of nested
subroutine calls
* S7170730, CVE-2013-2451: Improve Windows network
stack support.
* S8000638, CVE-2013-2450: Improve deserialization
* S8000642, CVE-2013-2446: Better handling of objects
for transportation
* S8001033, CVE-2013-2452: Refactor network address
handling in virtual machine identifiers * S8001034, CVE-2013-1500: Memory management
improvements
* S8001038, CVE-2013-2444: Resourcefully handle
resources
* S8001318, CVE-2013-2447: Socket.getLocalAddress not
consistent with InetAddress.getLocalHost
* S8001330, CVE-2013-2443: Improve on checking order
(non-Zero builds only)
* S8003703, CVE-2013-2412: Update RMI connection dialog
box
* S8004288, CVE-2013-2449: (fs) Files.probeContentType
problems
* S8006328, CVE-2013-2448: Improve robustness of sound
classes
* S8007812, CVE-2013-2455: (reflect)
Class.getEnclosingMethod problematic for some classes
* S8008120, CVE-2013-2457: Improve JMX class checking
* S8008124, CVE-2013-2453: Better compliance testing
* S8008132, CVE-2013-2456: Better serialization support
* S8008744, CVE-2013-2407: Rework part of fix for
JDK-6741606
* S8009057, CVE-2013-2448: Improve MIDI event handling
* S8009071, CVE-2013-2459: Improve shape handling
* S8009424, CVE-2013-2458: Adapt Nashorn to JSR-292
implementation change
* S8009554, CVE-2013-2454: Improve
SerialJavaObject.getFields
* S8010209, CVE-2013-2460: Better provision of factories
* S8011243, CVE-2013-2470: Improve ImagingLib
* S8011248, CVE-2013-2471: Better Component Rasters * S8011253, CVE-2013-2472: Better Short Component
Rasters * S8011257, CVE-2013-2473: Better Byte Component Rasters * S8012375, CVE-2013-1571: Improve Javadoc framing
* S8012438, CVE-2013-2463: Better image validation
* S8012597, CVE-2013-2465: Better image channel
verification
* S8012601, CVE-2013-2469: Better validation of image
layouts
* S8014281, CVE-2013-2461: Better checking of XML
signature
Security Issue references:
* CVE-2013-2407
References
#828665
Cross- CVE-2013-1500 CVE-2013-1571 CVE-2013-2407
CVE-2013-2412 CVE-2013-2443 CVE-2013-2444
CVE-2013-2445 CVE-2013-2446 CVE-2013-2447
CVE-2013-2448 CVE-2013-2449 CVE-2013-2450
CVE-2013-2451 CVE-2013-2452 CVE-2013-2453
CVE-2013-2454 CVE-2013-2455 CVE-2013-2456
CVE-2013-2457 CVE-2013-2458 CVE-2013-2459
CVE-2013-2460 CVE-2013-2461 CVE-2013-2463
CVE-2013-2465 CVE-2013-2469 CVE-2013-2470
CVE-2013-2471 CVE-2013-2472 CVE-2013-2473
Affected Products:
SUSE Linux Enterprise Desktop 11 SP3
https://www.suse.com/security/cve/CVE-2013-1500.html
https://www.suse.com/security/cve/CVE-2013-1571.html
https://www.suse.com/security/cve/CVE-2013-2407.html
https://www.suse.com/security/cve/CVE-2013-2412.html
https://www.suse.com/security/cve/CVE-2013-2443.html
https://www.suse.com/security/cve/CVE-2013-2444.html
https://www.suse.com/security/cve/CVE-2013-2445.html
https://www.suse.com/security/cve/CVE-2013-2446.html
https://www.suse.com/security/cve/CVE-2013-2447.html
https://www.suse.com/security/cve/CVE-2013-2448.html
https://www.suse.com/security/cve/CVE-2013-2449.html
https://www.suse.com/security/cve/CVE-2013-2450.html
https://www.suse.com/security/cve/CVE-2013-2451.html
https://www.suse.com/security/cve/CVE-2013-2452.html
https://www.suse.com/security/cve/CVE-2013-2453.html
https://www.suse.com/security/cve/CVE-2013-2454.html
https://www.suse.com/security/cve/CVE-2013-2455.html
https://www.suse.com/security/cve/CVE-2013-2456.html
https://www.suse.com/security/cve/CVE-2013-2457.html
https://www.suse.com/security/cve/CVE-2013-2458.html
https://www.suse.com/security/cve/CVE-2013-2459.html
https://www.suse.com/security/cve/CVE-2013-2460.html
https://www.suse.com/security/cve/CVE-2013-2461.html
https://www.suse.com/security/cve/CVE-2013-2463.html
https://www.suse.com/security/cve/CVE-2013-2465.html
https://www.suse.com/security/cve/CVE-2013-2469.html
https://www.suse.com/security/cve/CVE-2013-2470.html
https://www.suse.com/security/cve/CVE-2013-2471.html
https://www.suse.com/security/cve/CVE-2013-2472.html
https://www.suse.com/security/cve/CVE-2013-2473.html
https://bugzilla.novell.com/828665
https://login.microfocus.com/nidp/app/login