SUSE Security Update: Security update for IBM Java 1.6.0
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:1595-1
Rating:             important
References:         #785631 #788750
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 11 SP2
                    SUSE Linux Enterprise Server 11 SP2 for VMware
                    SUSE Linux Enterprise Server 11 SP2
                    SUSE Linux Enterprise Java 11 SP2
______________________________________________________________________________

   An update that contains security fixes can now be installed.

Description:


   IBM Java 1.6.0 has been updated to SR12 which fixes bugs
   and security  issues.

   More information can be found on:

   http://www.ibm.com/developerworks/java/jdk/alerts/
   <http://www.ibm.com/developerworks/java/jdk/alerts/>

   CVEs fixed: CVE-2012-3159, CVE-2012-3216, CVE-2012-5068,
   CVE-2012-3143, CVE-2012-5073,  CVE-2012-5075,
   CVE-2012-5083, CVE-2012-5083, CVE-2012-5072,
   CVE-2012-1531,  CVE-2012-5081, CVE-2012-1532,
   CVE-2012-1533, CVE-2012-5069, CVE-2012-5071,
   CVE-2012-5084, CVE-2012-5079, CVE-2012-5089


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 11 SP2:

      zypper in -t patch sdksp2-java-1_6_0-ibm-7095

   - SUSE Linux Enterprise Server 11 SP2 for VMware:

      zypper in -t patch slessp2-java-1_6_0-ibm-7095

   - SUSE Linux Enterprise Server 11 SP2:

      zypper in -t patch slessp2-java-1_6_0-ibm-7095

   - SUSE Linux Enterprise Java 11 SP2:

      zypper in -t patch slejsp2-java-1_6_0-ibm-7095

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ppc64 s390x
x86_64):

      java-1_6_0-ibm-devel-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64):

      java-1_6_0-ibm-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-fonts-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64):

      java-1_6_0-ibm-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-fonts-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-jdbc-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-plugin-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 for VMware (i586):

      java-1_6_0-ibm-alsa-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 (i586 ppc64 s390x x86_64):

      java-1_6_0-ibm-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-fonts-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-jdbc-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):

      java-1_6_0-ibm-plugin-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 (i586):

      java-1_6_0-ibm-alsa-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Java 11 SP2 (i586 ppc64 s390x x86_64):

      java-1_6_0-ibm-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-devel-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-fonts-1.6.0_sr12.0-0.5.1
      java-1_6_0-ibm-jdbc-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Java 11 SP2 (i586 x86_64):

      java-1_6_0-ibm-plugin-1.6.0_sr12.0-0.5.1

   - SUSE Linux Enterprise Java 11 SP2 (i586):

      java-1_6_0-ibm-alsa-1.6.0_sr12.0-0.5.1


References:

   https://bugzilla.novell.com/785631
   https://bugzilla.novell.com/788750
   http://download.novell.com/patch/finder/?keywords=5a12f1af483115fdac3b86d87bb0d68c

Review: Logging and Log Management

Posted on 22 May 2013.  |  Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities

Posted on 22 May 2013.  |  Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage

Posted on 21 May 2013.  |  Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance

Posted on 20 May 2013.  |  Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware

Posted on 20 May 2013.  |  A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.