Feeds

Sun and VMWare updates keep sysadmins busy

Patched quilt

  • alert
  • submit to reddit

Remote control for virtualized desktops

Security updates from Sun and VMware make it a busy day for patching on Thursday.

Sun Java 6.0 Update 11 addresses multiple security and performance bugs in Java Runtime Environment and Java SE Development software, as explained in release notes from Sun here. The one-line descriptions of the 18 bugs addressed by the update, published on Wednesday, make drawing too many conclusions about their seriousness tricky.

Some of the descriptions link to more details which show that the most severe "high-risk" flaws involve "serious rendering issues on Nvidia boards with driver version 178.13 on Vista", as well as bugs in JTree, JFileChooser and IM Candidate, among other components. Multiple bugs in Java plugins also earn the high-risk badge.

The release notes from Sun make for a dense read but are the best reference point on the update. Summaries from US-CERT and the Internet Storm Centre published thus far simply link back to Sun's advisory.

VMWare separately published a security advisory on Tuesday that addresses two potentially serious security vulnerabilities affecting a range of products from the virtualisation vendor. The first bug involves a critical memory corruption flaw in virtual device hardware, while the other concerns flaws in bzip2, a service console package. Bugs in the package mean applications that use it are liable to crash when decompressing malformed archives. The two flaws affect various versions of VMware Workstation, Player, Server, ESX and ESX(i). Patches for affected versions are largely available, with a couple of exceptions. The patching matrix is fairly complicated and best explained by reference to VMWare's advisory here.

VMWare also, on Tuesday, revised a security advisory first published in October. Updated ESX packages for libxml2, ucd-snmp, libtiff are now available for version 3.5 of the enterprise virtualisation product, it said. ®

Remote control for virtualized desktops

More from The Register

next story
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
NASA launches new climate model at SC14
75 days of supercomputing later ...
Yahoo! blames! MONSTER! email! OUTAGE! on! CUT! CABLE! bungle!
Weekend woe for BT as telco struggles to restore service
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
BOFH: WHERE did this 'fax-enabled' printer UPGRADE come from?
Don't worry about that cable, it's part of the config
Want to STUFF Facebook with blatant ADVERTISING? Fine! But you must PAY
Pony up or push off, Zuck tells social marketeers
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.