CVE-2015-0458

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to...

7.6 High

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Exploit likelihood

4.95%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.6

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record: CVE-2015-0458
CVSS 2.0: 7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record: CVE-2015-0458
Updated: 2026-11-02

EUVDEUVD-2015-0471 No score

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record: EUVD-2015-0471
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3987-vfrq-6p9c No score

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to...

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record: GHSA-3987-vfrq-6p9c
Updated: 2026-11-02

OSVSUSE-SU-2015:0336-1 No score

Security update for Java OpenJDK

Oracle Critical Patch Update Advisory - October 2014

Description:

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.

Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record: SUSE-SU-2015:0336-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0343-1 No score

Security update for IBM Java

java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.

These security issues have been fixed:

* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect integrity via unknown vectors related to
  Deployment, a different vulnerability than CVE-2014-6527
  (CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified…

Record: SUSE-SU-2015:0343-1
Updated: 2026-11-02

Show 16 moreShow less

OSVSUSE-SU-2015:0343-2 No score

Security update for IBM Java

java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.

These security issues have been fixed:

* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
  remote attackers to affect integrity via unknown vectors related to
  Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
  remote…

Record: SUSE-SU-2015:0343-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0344-1 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …

Record: SUSE-SU-2015:0344-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0392-1 No score

Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …

Record: SUSE-SU-2015:0392-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0789-1 No score

Security update for java-1_7_0-openjdk, java-1_7_0-openjdk-bootstrap

OpenJDK was updated to 2.5.5 - OpenJdk 7u79 to fix security issues and bugs:

The following vulnerabilities were fixed:

CVE-2015-0458: Deployment: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
CVE-2015-0459: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
CVE-2015-0460: Hotspot: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
CVE-2015-0469: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
CVE-2015-0477: Beans: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols
CVE-2015-0478: JCE: unauthenticated remote attackers could read some JAVA accessible data via multiple protocols
CVE-2015-0480: Tools: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols and cause a partial denial of service (partial DOS)
CVE-2015-0484: JavaFX: unauthenticated remote attackers could read, update, insert or delete access some Java accessible data via multiple protocols and cause a partial denial of service (partial DOS).
CVE-2015-0488: JSSE: unauthenticated remote attackers could cause a partial denial of service (partial DOS).
CVE-2015-0491: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
CVE-2015-0492: JavaFX: unauthenticated remote attackers could execute arbitrary code via multiple protocols.

Record: SUSE-SU-2015:0789-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0833-1 No score

Security update for Java OpenJDK

Oracle Critical Patch Update Advisory - October 2014

Description:

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.

Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record: SUSE-SU-2015:0833-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1086-1 No score

Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …

Record: SUSE-SU-2015:1086-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1086-2 No score

Security update for IBM Java

java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.

These security issues has been fixed:

* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
  remote attackers to affect integrity via unknown vectors related to
  Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
  remote…

Record: SUSE-SU-2015:1086-2
Updated: 2026-11-02

OSVSUSE-SU-2015:1086-3 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …

Record: SUSE-SU-2015:1086-3
Updated: 2026-11-02

OSVSUSE-SU-2015:1086-4 No score

Security update for IBM Java

java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.

These security issues have been fixed:

* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect integrity via unknown vectors related to
  Deployment, a different vulnerability than CVE-2014-6527
  (CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified…

Record: SUSE-SU-2015:1086-4
Updated: 2026-11-02

OSVSUSE-SU-2015:1161-1 No score

Security update for java-1_6_0-ibm

IBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.

Tabulated information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015

CVEs addressed: CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Additional bugs fixed:

Fix javaws/plugin stuff should slave plugin update-alternatives (bnc#912434)
Changed Java to use the system root CA certificates (bnc#912447)

Record: SUSE-SU-2015:1161-1
Updated: 2026-11-02

OSVSUSE-SU-2015:2166-1 No score

Security update for java-1_6_0-ibm

This update for java-1_6_0-ibm fixes the following issues:

Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006

CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Record: SUSE-SU-2015:2166-1
Updated: 2026-11-02

OSVSUSE-SU-2015:2168-1 No score

Security update for java-1_7_1-ibm

The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues:

bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006
Add backcompat symlinks for sdkdir
bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir

Record: SUSE-SU-2015:2168-1
Updated: 2026-11-02

OSVSUSE-SU-2015:2168-2 No score

Security update for java-1_7_1-ibm

The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues:

bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006
Add backcompat symlinks for sdkdir
bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir

Record: SUSE-SU-2015:2168-2
Updated: 2026-11-02

OSVSUSE-SU-2015:2182-1 No score

Security update for java-1_7_1-ibm

The java-1_7_1-ibm package was updated to version 7.1-3.20 to fix several security and non security issues:

bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006
Add backcompat symlinks for sdkdir
bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir

Record: SUSE-SU-2015:2182-1
Updated: 2026-11-02

OSVSUSE-SU-2015:2192-1 No score

Security update for java-1_6_0-ibm

This update for java-1_6_0-ibm fixes the following issues:

Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204
Add backcompat symlinks for sdkdir
Fix baselibs.conf policy symlinking
Fix bsc#941939 to provide %{name} instead of %{sdklnk} only in _jvmprivdir

Record: SUSE-SU-2015:2192-1
Updated: 2026-11-02

OSVSUSE-SU-2015:2216-1 No score

Security update for java-1_7_0-ibm

The java-1_7_0-ibm package was updated to version 7.0-9.20 to fix several security and non security issues:

bnc#955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006
Add backcompat symlinks for sdkdir
bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir

Record: SUSE-SU-2015:2216-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`java-1.8.0-oracle` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el6_6	1:1.8.0.45-1jpp.2.el6_6
`java-1.8.0-oracle-devel` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el6_6	1:1.8.0.45-1jpp.2.el6_6
`java-1.8.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el6_6	1:1.8.0.45-1jpp.2.el6_6
`java-1.8.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el6_6	1:1.8.0.45-1jpp.2.el6_6
`java-1.8.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el6_6	1:1.8.0.45-1jpp.2.el6_6
`java-1.8.0-oracle-src` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el6_6	1:1.8.0.45-1jpp.2.el6_6
`java-1.8.0-oracle` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el7_1	1:1.8.0.45-1jpp.2.el7_1
`java-1.8.0-oracle-devel` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el7_1	1:1.8.0.45-1jpp.2.el7_1
`java-1.8.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el7_1	1:1.8.0.45-1jpp.2.el7_1
`java-1.8.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el7_1	1:1.8.0.45-1jpp.2.el7_1

Show 115 moreShow less

Affected packages
Package	Affected	Fixed
`java-1.8.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el7_1	1:1.8.0.45-1jpp.2.el7_1
`java-1.8.0-oracle-src` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs	before 1:1.8.0.45-1jpp.2.el7_1	1:1.8.0.45-1jpp.2.el7_1
`java-1.7.0-oracle` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el5_11	1:1.7.0.79-1jpp.1.el5_11
`java-1.7.0-oracle-devel` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el5_11	1:1.7.0.79-1jpp.1.el5_11
`java-1.7.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el5_11	1:1.7.0.79-1jpp.1.el5_11
`java-1.7.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el5_11	1:1.7.0.79-1jpp.1.el5_11
`java-1.7.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el5_11	1:1.7.0.79-1jpp.1.el5_11
`java-1.7.0-oracle-src` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el5_11	1:1.7.0.79-1jpp.1.el5_11
`java-1.7.0-oracle` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el6_6	1:1.7.0.79-1jpp.1.el6_6
`java-1.7.0-oracle-devel` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el6_6	1:1.7.0.79-1jpp.1.el6_6
`java-1.7.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el6_6	1:1.7.0.79-1jpp.1.el6_6
`java-1.7.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el6_6	1:1.7.0.79-1jpp.1.el6_6
`java-1.7.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el6_6	1:1.7.0.79-1jpp.1.el6_6
`java-1.7.0-oracle-src` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el6_6	1:1.7.0.79-1jpp.1.el6_6
`java-1.7.0-oracle` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el7_1	1:1.7.0.79-1jpp.1.el7_1
`java-1.7.0-oracle-devel` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el7_1	1:1.7.0.79-1jpp.1.el7_1
`java-1.7.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el7_1	1:1.7.0.79-1jpp.1.el7_1
`java-1.7.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el7_1	1:1.7.0.79-1jpp.1.el7_1
`java-1.7.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el7_1	1:1.7.0.79-1jpp.1.el7_1
`java-1.7.0-oracle-src` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs	before 1:1.7.0.79-1jpp.1.el7_1	1:1.7.0.79-1jpp.1.el7_1
`java-1.6.0-sun` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el5_11	1:1.6.0.95-1jpp.3.el5_11
`java-1.6.0-sun-demo` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el5_11	1:1.6.0.95-1jpp.3.el5_11
`java-1.6.0-sun-devel` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el5_11	1:1.6.0.95-1jpp.3.el5_11
`java-1.6.0-sun-jdbc` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el5_11	1:1.6.0.95-1jpp.3.el5_11
`java-1.6.0-sun-plugin` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el5_11	1:1.6.0.95-1jpp.3.el5_11
`java-1.6.0-sun-src` Red Hat:rhel_extras_oracle_java:5 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el5_11	1:1.6.0.95-1jpp.3.el5_11
`java-1.6.0-sun` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el6_6	1:1.6.0.95-1jpp.3.el6_6
`java-1.6.0-sun-demo` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el6_6	1:1.6.0.95-1jpp.3.el6_6
`java-1.6.0-sun-devel` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el6_6	1:1.6.0.95-1jpp.3.el6_6
`java-1.6.0-sun-jdbc` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el6_6	1:1.6.0.95-1jpp.3.el6_6
`java-1.6.0-sun-plugin` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el6_6	1:1.6.0.95-1jpp.3.el6_6
`java-1.6.0-sun-src` Red Hat:rhel_extras_oracle_java:6 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el6_6	1:1.6.0.95-1jpp.3.el6_6
`java-1.6.0-sun` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el7_1	1:1.6.0.95-1jpp.3.el7_1
`java-1.6.0-sun-demo` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el7_1	1:1.6.0.95-1jpp.3.el7_1
`java-1.6.0-sun-devel` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el7_1	1:1.6.0.95-1jpp.3.el7_1
`java-1.6.0-sun-jdbc` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el7_1	1:1.6.0.95-1jpp.3.el7_1
`java-1.6.0-sun-plugin` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el7_1	1:1.6.0.95-1jpp.3.el7_1
`java-1.6.0-sun-src` Red Hat:rhel_extras_oracle_java:7 From an advisory covering 10 CVEs	before 1:1.6.0.95-1jpp.3.el7_1	1:1.6.0.95-1jpp.3.el7_1
`java-1.6.0-ibm` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-accessibility` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-demo` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-devel` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-javacomm` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-jdbc` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-plugin` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-src` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-accessibility` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-demo` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-devel` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-javacomm` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-jdbc` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-plugin` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-src` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-demo` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-devel` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-javacomm` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-jdbc` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-plugin` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-src` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.7.0-ibm` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-demo` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-devel` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-jdbc` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-plugin` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-src` Red Hat:rhel_extras:5::client From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-demo` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-devel` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-jdbc` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-plugin` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.0-ibm-src` Red Hat:rhel_extras:5::server From an advisory covering 13 CVEs	before 1:1.7.0.9.0-1jpp.1.el5	1:1.7.0.9.0-1jpp.1.el5
`java-1.7.1-ibm` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el6_6	1:1.7.1.3.0-1jpp.2.el6_6
`java-1.7.1-ibm-demo` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el6_6	1:1.7.1.3.0-1jpp.2.el6_6
`java-1.7.1-ibm-devel` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el6_6	1:1.7.1.3.0-1jpp.2.el6_6
`java-1.7.1-ibm-jdbc` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el6_6	1:1.7.1.3.0-1jpp.2.el6_6
`java-1.7.1-ibm-plugin` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el6_6	1:1.7.1.3.0-1jpp.2.el6_6
`java-1.7.1-ibm-src` Red Hat:rhel_extras:6 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el6_6	1:1.7.1.3.0-1jpp.2.el6_6
`java-1.7.1-ibm` Red Hat:rhel_extras:7 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el7_1	1:1.7.1.3.0-1jpp.2.el7_1
`java-1.7.1-ibm-demo` Red Hat:rhel_extras:7 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el7_1	1:1.7.1.3.0-1jpp.2.el7_1
`java-1.7.1-ibm-devel` Red Hat:rhel_extras:7 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el7_1	1:1.7.1.3.0-1jpp.2.el7_1
`java-1.7.1-ibm-jdbc` Red Hat:rhel_extras:7 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el7_1	1:1.7.1.3.0-1jpp.2.el7_1
`java-1.7.1-ibm-plugin` Red Hat:rhel_extras:7 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el7_1	1:1.7.1.3.0-1jpp.2.el7_1
`java-1.7.1-ibm-src` Red Hat:rhel_extras:7 From an advisory covering 13 CVEs	before 1:1.7.1.3.0-1jpp.2.el7_1	1:1.7.1.3.0-1jpp.2.el7_1
`java-1.6.0-ibm` Red Hat:network_satellite:5.6::el5 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm-devel` Red Hat:network_satellite:5.6::el5 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el5	1:1.6.0.16.4-1jpp.1.el5
`java-1.6.0-ibm` Red Hat:network_satellite:5.6::el6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-devel` Red Hat:network_satellite:5.6::el6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm` Red Hat:network_satellite:5.7::el6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1.6.0-ibm-devel` Red Hat:network_satellite:5.7::el6 From an advisory covering 13 CVEs	before 1:1.6.0.16.4-1jpp.1.el6_6	1:1.6.0.16.4-1jpp.1.el6_6
`java-1_7_0-openjdk` SUSE:Linux Enterprise Desktop 12 From an advisory covering 11 CVEs	before 1.7.0.79-15.1	1.7.0.79-15.1
`java-1_7_0-openjdk` SUSE:Linux Enterprise Server 12 From an advisory covering 11 CVEs	before 1.7.0.79-15.1	1.7.0.79-15.1
`java-1_7_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 11 CVEs	before 1.7.0.79-15.1	1.7.0.79-15.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 13 CVEs	before 1.6.0_sr16.4-15.1	1.6.0_sr16.4-15.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 31 CVEs	before 1.6.0_sr16.15-46.1	1.6.0_sr16.15-46.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Server 11 SP2-LTSS From an advisory covering 31 CVEs	before 1.6.0_sr16.15-46.1	1.6.0_sr16.15-46.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Server 11 SP3 From an advisory covering 31 CVEs	before 1.6.0_sr16.15-46.1	1.6.0_sr16.15-46.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 31 CVEs	before 1.6.0_sr16.15-46.1	1.6.0_sr16.15-46.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 31 CVEs	before 1.6.0_sr16.15-46.1	1.6.0_sr16.15-46.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-18.1	1.7.1_sr3.20-18.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Server 12 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-18.1	1.7.1_sr3.20-18.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-18.1	1.7.1_sr3.20-18.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-18.1	1.7.1_sr3.20-18.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-18.1	1.7.1_sr3.20-18.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-18.1	1.7.1_sr3.20-18.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-6.1	1.7.1_sr3.20-6.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-6.1	1.7.1_sr3.20-6.1
`java-1_7_1-ibm` SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 29 CVEs	before 1.7.1_sr3.20-6.1	1.7.1_sr3.20-6.1
`java-1_6_0-ibm` SUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 31 CVEs	before 1.6.0_sr16.15-27.1	1.6.0_sr16.15-27.1
`java-1_7_0-ibm` SUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 29 CVEs	before 1.7.0_sr9.20-42.1	1.7.0_sr9.20-42.1
`java-1_7_0-ibm` SUSE:Linux Enterprise Server 11 SP2-LTSS From an advisory covering 29 CVEs	before 1.7.0_sr9.20-42.1	1.7.0_sr9.20-42.1
`java-1_7_0-ibm` SUSE:Linux Enterprise Server 11 SP3 From an advisory covering 29 CVEs	before 1.7.0_sr9.20-42.1	1.7.0_sr9.20-42.1
`java-1_7_0-ibm` SUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 29 CVEs	before 1.7.0_sr9.20-42.1	1.7.0_sr9.20-42.1
`java-1_7_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 29 CVEs	before 1.7.0_sr9.20-42.1	1.7.0_sr9.20-42.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-0458 is a high vulnerability (CVSS 7.6) in Novell Suse Linux Enterprise Desktop, published November 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.95%, the 92nd percentile. No source names a fixed version.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 340 references and the rest of 8 source descriptions. The JSON record has them.