Feeds

Sun and VMWare updates keep sysadmins busy

Patched quilt

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Security updates from Sun and VMware make it a busy day for patching on Thursday.

Sun Java 6.0 Update 11 addresses multiple security and performance bugs in Java Runtime Environment and Java SE Development software, as explained in release notes from Sun here. The one-line descriptions of the 18 bugs addressed by the update, published on Wednesday, make drawing too many conclusions about their seriousness tricky.

Some of the descriptions link to more details which show that the most severe "high-risk" flaws involve "serious rendering issues on Nvidia boards with driver version 178.13 on Vista", as well as bugs in JTree, JFileChooser and IM Candidate, among other components. Multiple bugs in Java plugins also earn the high-risk badge.

The release notes from Sun make for a dense read but are the best reference point on the update. Summaries from US-CERT and the Internet Storm Centre published thus far simply link back to Sun's advisory.

VMWare separately published a security advisory on Tuesday that addresses two potentially serious security vulnerabilities affecting a range of products from the virtualisation vendor. The first bug involves a critical memory corruption flaw in virtual device hardware, while the other concerns flaws in bzip2, a service console package. Bugs in the package mean applications that use it are liable to crash when decompressing malformed archives. The two flaws affect various versions of VMware Workstation, Player, Server, ESX and ESX(i). Patches for affected versions are largely available, with a couple of exceptions. The patching matrix is fairly complicated and best explained by reference to VMWare's advisory here.

VMWare also, on Tuesday, revised a security advisory first published in October. Updated ESX packages for libxml2, ucd-snmp, libtiff are now available for version 3.5 of the enterprise virtualisation product, it said. ®

Beginner's guide to SSL certificates

More from The Register

next story
The cloud that goes puff: Seagate Central home NAS woes
4TB of home storage is great, until you wake up to a dead device
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
Want to STUFF Facebook with blatant ADVERTISING? Fine! But you must PAY
Pony up or push off, Zuck tells social marketeers
Oi, Europe! Tell US feds to GTFO of our servers, say Microsoft and pals
By writing a really angry letter about how it's harming our cloud business, ta
BOFH: WHERE did this 'fax-enabled' printer UPGRADE come from?
Don't worry about that cable, it's part of the config
Intel offers ingenious piece of 10TB 3D NAND chippery
The race for next generation flash capacity now on
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.