Every CVE Search/ Get API key

CVE-2013-6954

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a...

5.0 MediumFix available

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

Exploit likelihood

4.69%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List 6.5

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

Record
CVE-2013-6954
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2013-6755 6.5

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

Record
EUVD-2013-6755
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jqh6-vqxw-fcv3 6.5

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a...

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

Record
GHSA-jqh6-vqxw-fcv3
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD 6.5

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

Record
CVE-2013-6954
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
OSVMGASA-2014-0075 No score

Updated libpng and libpng12 packages fix security vulnerability

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PLTE chunk of zero bytes or a NULL palette, related to pngrtran.c and pngset.c (CVE-2013-6954).

Record
MGASA-2014-0075
Updated
2026-11-02
OSVMGASA-2014-0076 No score

Updated libpng12 package fixes security vulnerability

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PLTE chunk of zero bytes or a NULL palette, related to pngrtran.c and pngset.c (CVE-2013-6954).

Record
MGASA-2014-0076
Updated
2026-11-02
Show 12 moreShow less
OSVopenSUSE-SU-2024:10050-1 No score

libpng16-16-1.6.26-1.1 on GA media

These are all security issues fixed in the libpng16-16-1.6.26-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10050-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10534-1
Updated
2026-11-02
OSVSUSE-SU-2015:0336-1 No score

Security update for Java OpenJDK

Oracle Critical Patch Update Advisory - October 2014

Description:

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.

Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record
SUSE-SU-2015:0336-1
Updated
2026-11-02
OSVSUSE-SU-2015:0343-1 No score

Security update for IBM Java

java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.

These security issues have been fixed:

* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect integrity via unknown vectors related to
  Deployment, a different vulnerability than CVE-2014-6527
  (CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified…
Record
SUSE-SU-2015:0343-1
Updated
2026-11-02
OSVSUSE-SU-2015:0343-2 No score

Security update for IBM Java

java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.

These security issues have been fixed:

* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
  remote attackers to affect integrity via unknown vectors related to
  Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
  remote…
Record
SUSE-SU-2015:0343-2
Updated
2026-11-02
OSVSUSE-SU-2015:0344-1 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0344-1
Updated
2026-11-02
OSVSUSE-SU-2015:0392-1 No score

Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0392-1
Updated
2026-11-02
OSVSUSE-SU-2015:0833-1 No score

Security update for Java OpenJDK

Oracle Critical Patch Update Advisory - October 2014

Description:

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.

Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record
SUSE-SU-2015:0833-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-1 No score

Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-2 No score

Security update for IBM Java

java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.

These security issues has been fixed:

* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
  remote attackers to affect integrity via unknown vectors related to
  Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
  remote…
Record
SUSE-SU-2015:1086-2
Updated
2026-11-02
OSVSUSE-SU-2015:1086-3 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-3
Updated
2026-11-02
OSVSUSE-SU-2015:1086-4 No score

Security update for IBM Java

java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.

These security issues have been fixed:

* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect integrity via unknown vectors related to
  Deployment, a different vulnerability than CVE-2014-6527
  (CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified…
Record
SUSE-SU-2015:1086-4
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjdk-7
Debian:7
From an advisory covering 26 CVEs
 before 7u55-2.4.7-1~deb7u1, plus listed versions
7u13-2.3.6-17u15-2.3.7-17u17-2.3.8-17u17-2.3.8-27u21-2.3.9-1
Show 34 moreShow less
7u21-2.3.9-27u21-2.3.9-37u21-2.3.9-47u21-2.3.9-57u21-2.3.9-5+powerpcspe17u25-2.3.10-17u25-2.3.10-1+alpha7u25-2.3.10-1~deb7u17u25-2.3.10-27u25-2.3.10-2+powerpcspe17u25-2.3.12-17u25-2.3.12-1+alpha7u25-2.3.12-27u25-2.3.12-37u25-2.3.12-47u25-2.3.12-4+alpha7u3-2.1.7-17u45-2.4.3-17u45-2.4.3-2.37u45-2.4.3-37u45-2.4.3-47u45-2.4.3-4+alpha7u45-2.4.3-4+b1+alpha7u45-2.4.3-57u51-2.4.4-17u51-2.4.5-17u51-2.4.5-27u51-2.4.6-17u51-2.4.6~pre1-17u7-2.3.2-17u7-2.3.2a-17u9-2.3.3-17u9-2.3.4-17u9-2.3.5~pre1-1
7u55-2.4.7-1~deb7u1
libpng
Mageia:3
 before 1.5.13-2.1.mga3
1.5.13-2.1.mga3
libpng12
Mageia:3
 before 1.2.50-3.1.mga3
1.2.50-3.1.mga3
libpng12
Mageia:4
 before 1.2.50-4.1.mga4
1.2.50-4.1.mga4
java-1.7.0-oracle
Red Hat:rhel_extras:5::client
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-devel
Red Hat:rhel_extras:5::client
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:5::client
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:5::client
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-src
Red Hat:rhel_extras:5::client
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
Show 97 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.0-oracle
Red Hat:rhel_extras:5::server
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-devel
Red Hat:rhel_extras:5::server
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:5::server
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:5::server
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-src
Red Hat:rhel_extras:5::server
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle
Red Hat:rhel_extras:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-devel
Red Hat:rhel_extras:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-src
Red Hat:rhel_extras:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.2.el5_10
1:1.7.0.55-1jpp.2.el5_10
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 34 CVEs
 before 1:1.7.0.55-1jpp.1.el6_5
1:1.7.0.55-1jpp.1.el6_5
java-1.6.0-sun
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.3.el5_10
1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-demo
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.3.el5_10
1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-devel
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.3.el5_10
1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-jdbc
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.3.el5_10
1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-plugin
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.3.el5_10
1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun-src
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.3.el5_10
1:1.6.0.75-1jpp.3.el5_10
java-1.6.0-sun
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.1.el6_5
1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-demo
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.1.el6_5
1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-devel
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.1.el6_5
1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-jdbc
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.1.el6_5
1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-plugin
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.1.el6_5
1:1.6.0.75-1jpp.1.el6_5
java-1.6.0-sun-src
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 127 CVEs
 before 1:1.6.0.75-1jpp.1.el6_5
1:1.6.0.75-1jpp.1.el6_5
java-1.7.0-ibm
Red Hat:rhel_extras:5::client
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::client
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::client
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::client
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::client
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm
Red Hat:rhel_extras:5::server
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::server
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::server
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::server
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::server
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el5_10
1:1.7.0.7.0-1jpp.1.el5_10
java-1.7.0-ibm
Red Hat:rhel_extras:6
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el6_5
1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el6_5
1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el6_5
1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el6_5
1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el6_5
1:1.7.0.7.0-1jpp.1.el6_5
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
From an advisory covering 29 CVEs
 before 1:1.7.0.7.0-1jpp.1.el6_5
1:1.7.0.7.0-1jpp.1.el6_5
java-1.6.0-ibm
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::client
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::server
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5_10
1:1.6.0.16.0-1jpp.1.el5_10
java-1.6.0-ibm
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-demo
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-devel
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.6.0-ibm-src
Red Hat:rhel_extras:6
From an advisory covering 24 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6_5
1:1.6.0.16.0-1jpp.1.el6_5
java-1.7.1-ibm
Red Hat:rhel_extras:7
From an advisory covering 54 CVEs
 before 1:1.7.1.1.0-1jpp.2.el7_0
1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
From an advisory covering 54 CVEs
 before 1:1.7.1.1.0-1jpp.2.el7_0
1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
From an advisory covering 54 CVEs
 before 1:1.7.1.1.0-1jpp.2.el7_0
1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
From an advisory covering 54 CVEs
 before 1:1.7.1.1.0-1jpp.2.el7_0
1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
From an advisory covering 54 CVEs
 before 1:1.7.1.1.0-1jpp.2.el7_0
1:1.7.1.1.0-1jpp.2.el7_0
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
From an advisory covering 54 CVEs
 before 1:1.7.1.1.0-1jpp.2.el7_0
1:1.7.1.1.0-1jpp.2.el7_0
java-1.6.0-ibm
Red Hat:network_satellite:5.4::el5
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5
1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.4::el5
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5
1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm
Red Hat:network_satellite:5.5::el5
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5
1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.5::el5
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5
1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm
Red Hat:network_satellite:5.6::el5
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5
1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.6::el5
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el5
1:1.6.0.16.0-1jpp.1.el5
java-1.6.0-ibm
Red Hat:network_satellite:5.5::el6
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6
1:1.6.0.16.0-1jpp.1.el6
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.5::el6
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6
1:1.6.0.16.0-1jpp.1.el6
java-1.6.0-ibm
Red Hat:network_satellite:5.6::el6
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6
1:1.6.0.16.0-1jpp.1.el6
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.6::el6
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6
1:1.6.0.16.0-1jpp.1.el6
java-1.6.0-ibm
Red Hat:network_satellite:5.4::el6
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6
1:1.6.0.16.0-1jpp.1.el6
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.4::el6
From an advisory covering 49 CVEs
 before 1:1.6.0.16.0-1jpp.1.el6
1:1.6.0.16.0-1jpp.1.el6
libpng16
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 1.6.26-1.1
1.6.26-1.1
java-1_7_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 304 CVEs
 before 1.7.0.121-1.1
1.7.0.121-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-6954 is a medium vulnerability (CVSS 5.0) in Libpng, published November 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.69%, the 91st percentile. Fixed in libpng 1.5.13-2.1.mga3.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 883 references and the rest of 8 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open