Bug 916266 (CVE-2014-8891) - VUL-0: CVE-2014-8891: java-1_7_1-ibm,java-1_5_0-ibm,java-1_7_0-ibm,java-1_6_0-ibm: Unspecified vulnerability
Summary: VUL-0: CVE-2014-8891: java-1_7_1-ibm,java-1_5_0-ibm,java-1_7_0-ibm,java-1_6_0...
Status: RESOLVED FIXED
Alias: CVE-2014-8891
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Deadline: 2015-02-17
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/113519/
Whiteboard: maint:released:sle10-sp3:60615 maint:...
Keywords:
Depends on:
Blocks:
 
Reported: 2015-02-04 16:15 UTC by Johannes Segitz
Modified: 2016-04-27 19:34 UTC (History)
6 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2015-02-04 16:15:40 UTC 
IBM JDK updates 7R1 SR2-FP10, 7 SR8-FP10, 6R1 SR8-FP3, 6 SR16-FP3 and 5.0 SR16-FP9 correct an unspecified vulnerability identified using CVE-2014-8891.

References:
http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015
https://bugzilla.redhat.com/show_bug.cgi?id=1189142
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8891
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8891
Comment 1 Swamp Workflow Management 2015-02-04 23:01:29 UTC 
bugbot adjusting priority
Comment 5 Swamp Workflow Management 2015-02-10 09:41:06 UTC 
An update workflow for this issue was started.
This issue was rated as important.
Please submit fixed packages until 2015-02-17.
When done, reassign the bug to security-team@suse.de.
https://swamp.suse.de/webswamp/wf/60610
Comment 8 Swamp Workflow Management 2015-02-17 15:05:17 UTC 
SUSE-SU-2015:0304-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
Comment 9 Swamp Workflow Management 2015-02-17 15:07:12 UTC 
SUSE-SU-2015:0306-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
Comment 10 Swamp Workflow Management 2015-02-21 00:05:37 UTC 
SUSE-SU-2015:0343-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
SUSE Linux Enterprise Software Development Kit 11 SP3 (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.4.1, java-1_7_0-ibm-1.7.0_sr8.10-0.6.1
SUSE Linux Enterprise Server 11 SP3 for VMware (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.4.1, java-1_7_0-ibm-1.7.0_sr8.10-0.6.1
SUSE Linux Enterprise Server 11 SP3 (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.4.1, java-1_7_0-ibm-1.7.0_sr8.10-0.6.1
Comment 11 Swamp Workflow Management 2015-02-21 00:06:44 UTC 
SUSE-SU-2015:0344-1: An update that solves two vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 891701,901223,901239,904889,916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
SUSE Linux Enterprise Server 11 SP2 LTSS (src):    java-1_7_0-ibm-1.7.0_sr8.10-0.6.4, java-1_7_0-ibm-1.7.0_sr8.10-0.6.5
Comment 12 Swamp Workflow Management 2015-02-21 00:07:58 UTC 
SUSE-SU-2015:0345-1: An update that solves two vulnerabilities and has three fixes is now available.

Category: security (important)
Bug References: 901223,901239,904889,916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
SUSE Linux Enterprise Server 10 SP4 LTSS (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.9.1
Comment 13 Swamp Workflow Management 2015-02-25 18:05:22 UTC 
SUSE-SU-2015:0343-2: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
SUSE Manager 1.7 for SLE 11 SP2 (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.4.1
Comment 14 Swamp Workflow Management 2015-02-25 18:06:35 UTC 
SUSE-SU-2015:0376-1: An update that solves two vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 891699,901223,901239,904889,916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
SUSE Linux Enterprise Server 10 SP4 LTSS (src):    java-1_5_0-ibm-1.5.0_sr16.9-0.6.1
Comment 15 Swamp Workflow Management 2015-02-27 18:06:44 UTC 
SUSE-SU-2015:0392-1: An update that solves two vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 592934,891700,901223,904889,916265,916266
CVE References: CVE-2014-8891,CVE-2014-8892
Sources used:
SUSE Linux Enterprise Server 11 SP2 LTSS (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.4.5
SUSE Linux Enterprise Server 11 SP1 LTSS (src):    java-1_6_0-ibm-1.6.0_sr16.3-0.4.5
Comment 16 Marcus Meissner 2015-03-02 09:57:17 UTC 
released