Security update for java-1_7_0-ibm SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0716-1 Final 1 1 2017-03-17T07:38:31Z current 2017-03-17T07:38:31Z 2017-03-17T07:38:31Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for java-1_7_0-ibm This update for java-1_7_1-ibm fixes the following issues: Security issue fixed: - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a 'Sweet32' attack. (bsc#1027038) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleclo50sp3-java-1_7_0-ibm-13027,sleman21-java-1_7_0-ibm-13027,slemap21-java-1_7_0-ibm-13027,sleposp3-java-1_7_0-ibm-13027,slessp3-java-1_7_0-ibm-13027 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170716-1/ Link for SUSE-SU-2017:0716-1 https://lists.suse.com/pipermail/sle-security-updates/2017-March/002703.html E-Mail link for SUSE-SU-2017:0716-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1027038 SUSE Bug 1027038 https://www.suse.com/security/cve/CVE-2016-2183/ SUSE CVE CVE-2016-2183 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 java-1_7_0-ibm-1.7.0_sr10.1-61.1 java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 java-1_7_0-ibm-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS java-1_7_0-ibm-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA java-1_7_0-ibm-1.7.0_sr10.1-61.1 as a component of SUSE Manager 2.1 java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 as a component of SUSE Manager 2.1 java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 as a component of SUSE Manager 2.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 as a component of SUSE Manager 2.1 java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 as a component of SUSE Manager 2.1 java-1_7_0-ibm-1.7.0_sr10.1-61.1 as a component of SUSE Manager Proxy 2.1 java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 as a component of SUSE Manager Proxy 2.1 java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 as a component of SUSE Manager Proxy 2.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 as a component of SUSE Manager Proxy 2.1 java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 as a component of SUSE Manager Proxy 2.1 java-1_7_0-ibm-1.7.0_sr10.1-61.1 as a component of SUSE OpenStack Cloud 5 java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 as a component of SUSE OpenStack Cloud 5 java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 as a component of SUSE OpenStack Cloud 5 java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 as a component of SUSE OpenStack Cloud 5 java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 as a component of SUSE OpenStack Cloud 5 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack. CVE-2016-2183 SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Point of Sale 11 SP3:java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 SUSE Manager 2.1:java-1_7_0-ibm-1.7.0_sr10.1-61.1 SUSE Manager 2.1:java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 SUSE Manager 2.1:java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 SUSE Manager 2.1:java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 SUSE Manager 2.1:java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 SUSE Manager Proxy 2.1:java-1_7_0-ibm-1.7.0_sr10.1-61.1 SUSE Manager Proxy 2.1:java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 SUSE Manager Proxy 2.1:java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 SUSE Manager Proxy 2.1:java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 SUSE Manager Proxy 2.1:java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 SUSE OpenStack Cloud 5:java-1_7_0-ibm-1.7.0_sr10.1-61.1 SUSE OpenStack Cloud 5:java-1_7_0-ibm-alsa-1.7.0_sr10.1-61.1 SUSE OpenStack Cloud 5:java-1_7_0-ibm-devel-1.7.0_sr10.1-61.1 SUSE OpenStack Cloud 5:java-1_7_0-ibm-jdbc-1.7.0_sr10.1-61.1 SUSE OpenStack Cloud 5:java-1_7_0-ibm-plugin-1.7.0_sr10.1-61.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170716-1/ https://www.suse.com/security/cve/CVE-2016-2183.html CVE-2016-2183 https://bugzilla.suse.com/1001912 SUSE Bug 1001912 https://bugzilla.suse.com/1024218 SUSE Bug 1024218 https://bugzilla.suse.com/1027038 SUSE Bug 1027038 https://bugzilla.suse.com/1034689 SUSE Bug 1034689 https://bugzilla.suse.com/1056614 SUSE Bug 1056614 https://bugzilla.suse.com/1171693 SUSE Bug 1171693 https://bugzilla.suse.com/994844 SUSE Bug 994844 https://bugzilla.suse.com/995359 SUSE Bug 995359