CVE-2015-2808
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...
5.0 MediumFix available
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
Exploit likelihood
73.9%Up 51.2 points since Feb 4, 2022
What each source reports
CVE List
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
- Record
CVE-2015-2808- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-327
- Updated
- 2026-11-02
EUVDEUVD-2015-2896
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
- Record
EUVD-2015-2896- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jcj6-c96p-jcmm
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
- Record
GHSA-jcj6-c96p-jcmm- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-327
- Updated
- 2026-11-02
NVD
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
- Record
CVE-2015-2808- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-327
- Updated
- 2026-11-02
OSVRHSA-2015:1228
Red Hat Security Advisory: java-1.8.0-openjdk security update
- Record
RHSA-2015:1228- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2015:1229
Red Hat Security Advisory: java-1.7.0-openjdk security update
- Record
RHSA-2015:1229- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 30 moreShow less
OSVRHSA-2015:1230
Red Hat Security Advisory: java-1.7.0-openjdk security update
- Record
RHSA-2015:1230- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2015:1241
Red Hat Security Advisory: java-1.8.0-oracle security update
- Record
RHSA-2015:1241- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2015:1242
Red Hat Security Advisory: java-1.7.0-oracle security update
- Record
RHSA-2015:1242- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2015:1243
Red Hat Security Advisory: java-1.6.0-sun security update
- Record
RHSA-2015:1243- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2015:1526
Red Hat Security Advisory: java-1.6.0-openjdk security update
- Record
RHSA-2015:1526- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-2808
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
- Record
UBUNTU-CVE-2015-2808- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2015-0277 No score
Updated java-1.7.0-openjdk package fixes security vulnerabilities
Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733).
A flaw was found in the way the Libraries component of OpenJDK verified Online Certificate Status Protocol (OCSP) responses. An OCSP response with no nextUpdate date specified was incorrectly handled as having unlimited validity, possibly causing a revoked X.509 certificate to be interpreted as valid (CVE-2015-4748).
It was discovered that the JCE component in OpenJDK failed to use constant time comparisons in multiple cases. An attacker could possibly use these flaws to disclose sensitive information by measuring the time used to perform operations using these non-constant time comparisons (CVE-2015-2601).
A flaw was found in the RC4 encryption algorithm. When using certain keys for RC4 encryption, an attacker could obtain portions of the plain text from the cipher text without the knowledge of the encryption key (CVE-2015-2808).
Note: With this update, OpenJDK now disables RC4 TLS/SSL cipher suites by default to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla bug 1207101, linked to in the References section, for additional details about this change.
A flaw was found in the way the TLS protocol composed the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic (CVE-2015-4000).
Note: This update forces the TLS/SSL client implementation in OpenJDK to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Refer to Red Hat Bugzilla bug 1223211, linked to in the References section, for additional details about this change.
It was discovered that the JNDI component in OpenJDK did not handle DNS resolutions correctly. An attacker able to trigger such DNS errors could cause a Java application using JNDI to consume memory and CPU time, and possibly block further DNS resolution (CVE-2015-4749).
Multiple information leak flaws were found in the JMX and 2D components in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions (CVE-2015-2621, CVE-2015-2632).
A flaw was found in the way the JSSE component in OpenJDK performed X.509 certificate identity verification when establishing a TLS/SSL connection to a host identified by an IP address. In certain cases, the certificate was accepted as valid if it was issued for a host name to which the IP address resolves rather than for the IP address (CVE-2015-2625)
- Record
MGASA-2015-0277- Updated
- 2026-11-02
OSVMGASA-2015-0280 No score
Updated java-1.8.0-openjdk package fixes security vulnerabilities
Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733).
A flaw was found in the way the Libraries component of OpenJDK verified Online Certificate Status Protocol (OCSP) responses. An OCSP response with no nextUpdate date specified was incorrectly handled as having unlimited validity, possibly causing a revoked X.509 certificate to be interpreted as valid (CVE-2015-4748).
It was discovered that the JCE component in OpenJDK failed to use constant time comparisons in multiple cases. An attacker could possibly use these flaws to disclose sensitive information by measuring the time used to perform operations using these non-constant time comparisons (CVE-2015-2601).
It was discovered that the GCM (Galois Counter Mode) implementation in the Security component of OpenJDK failed to properly perform a null check. This could cause the Java Virtual Machine to crash when an application performed encryption using a block cipher in the GCM mode (CVE-2015-2659).
A flaw was found in the RC4 encryption algorithm. When using certain keys for RC4 encryption, an attacker could obtain portions of the plain text from the cipher text without the knowledge of the encryption key (CVE-2015-2808).
Note: With this update, OpenJDK now disables RC4 TLS/SSL cipher suites by default to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla bug 1207101, linked to in the References section, for additional details about this change.
A flaw was found in the way the TLS protocol composed the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic (CVE-2015-4000).
Note: This update forces the TLS/SSL client implementation in OpenJDK to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Refer to Red Hat Bugzilla bug 1223211, linked to in the References section, for additional details about this change.
It was discovered that the JNDI component in OpenJDK did not handle DNS resolutions correctly. An attacker able to trigger such DNS errors could cause a Java application using JNDI to consume memory and CPU time, and possibly block further DNS resolution (CVE-2015-4749).
Multiple information leak flaws were found in the JMX and 2D components in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions (CVE-2015-2621, CVE-2015-2632).
A flaw was found in the way the JSSE component in OpenJDK performed X.509 certificate identity verification when establishing a TLS/SSL connection to a host identified by an IP address. In certain cases, the certificate was accepted as valid if it was issued for a host name to which the IP address resolves rather than for the IP address (CVE-2015-2625).
Multiple insecure temporary file use issues were found in the way the Hotspot component in OpenJDK created performance statistics and error log files. A local attacker could possibly make a victim using OpenJDK overwrite arbitrary files using a symlink attack. Note: This issue was originally fixed as CVE-2015-0383, but the fix was regressed in a later update (CVE-2015-3149).
- Record
MGASA-2015-0280- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10197-1 No score
java-1_8_0-openjdk-1.8.0.111-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10197-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-1 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:0343-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-2 No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues have been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:0343-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:0344-1 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0344-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0392-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0392-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1073-1 No score
Security update for java-1_7_0-ibm
This update fixes the following security issues:
-
Version bump to 7.1-3.0 release bnc#930365 CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138
-
Fix removeing links before update-alternatives run. bnc#931702
-
Fix bnc#912434, javaws/plugin stuff should slave plugin update-alternatives
-
Fix bnc#912447, use system cacerts
-
Update to 7.1.2.10 for sec issues bnc#916266 and bnc#916265 CVE-2014-8892 CVE-2014-8891
- Record
SUSE-SU-2015:1073-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-2 No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues has been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:1086-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-3 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-3- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-4 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:1086-4- Updated
- 2026-11-02
OSVSUSE-SU-2015:1161-1 No score
Security update for java-1_6_0-ibm
IBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.
Tabulated information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015
CVEs addressed: CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204
Additional bugs fixed:
- Fix javaws/plugin stuff should slave plugin update-alternatives (bnc#912434)
- Changed Java to use the system root CA certificates (bnc#912447)
- Record
SUSE-SU-2015:1161-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1319-1 No score
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
- CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very…
- Record
SUSE-SU-2015:1319-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1320-1 No score
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
- CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very…
- Record
SUSE-SU-2015:1320-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1329-1 No score
Security update for java-1_7_1-ibm
IBM Java was updated to 7.1-3.10 to fix several security issues.
The following vulnerabilities were fixed:
- CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
- CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.
- CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access…
- Record
SUSE-SU-2015:1329-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1331-1 No score
Security update for java-1_7_1-ibm
IBM Java was updated to 7.1-3.10 to fix several security issues.
The following vulnerabilities were fixed:
- CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
- CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.
- CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access…
- Record
SUSE-SU-2015:1331-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1345-1 No score
Security update for java-1_6_0-ibm
IBM Java was updated to 6.0-16.7 to fix several security issues.
The following vulnerabilities were fixed:
- CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
- CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.
- CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including…
- Record
SUSE-SU-2015:1345-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1375-1 No score
Security update for java-1_7_0-ibm
java-1_7_0-ibm was updated to fix 21 security issues.
These security issues were fixed:
- CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment (bsc#938895).
- CVE-2015-4748: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security (bsc#938895).
- CVE-2015-2664: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment (bsc#938895).
- CVE-2015-0192: Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allowed remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine (bsc#938895).
- CVE-2015-2613: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JCE (bsc#938895).
- CVE-2015-4731: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX (bsc#938895).
- CVE-2015-2637: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
- CVE-2015-4733: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI (bsc#938895).
- CVE-2015-4732: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590 (bsc#938895).
- CVE-2015-2621: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allowed remote attackers to affect confidentiality via vectors related to JMX (bsc#938895).
- CVE-2015-2619: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
- CVE-2015-2590: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732 (bsc#938895).
- CVE-2015-2638: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).
- CVE-2015-2625: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JSSE (bsc#938895).
- CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
- CVE-2015-1931: Unspecified vulnerability (bsc#938895).
- CVE-2015-4760: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).
- CVE-2015-4000: The TLS protocol 1.2 and…
- Record
SUSE-SU-2015:1375-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1509-1 No score
Security update for java-1_6_0-ibm
IBM Java was updated to version 6 SR16 FP7 (6.0-16.7) to fix several security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
- CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. (bnc#935540)
- CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in…
- Record
SUSE-SU-2015:1509-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:2166-1 No score
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues:
-
Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006
CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204
- Record
SUSE-SU-2015:2166-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:2192-1 No score
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues:
-
Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204
-
Add backcompat symlinks for sdkdir
-
Fix baselibs.conf policy symlinking
-
Fix bsc#941939 to provide %{name} instead of %{sdklnk} only in _jvmprivdir
- Record
SUSE-SU-2015:2192-1- Updated
- 2026-11-02
OSVUSN-2696-1 No score
openjdk-7 vulnerabilities
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748)
Several vulnerabilities were discovered in the cryptographic components of the OpenJDK JRE. An attacker could exploit these to expose sensitive data over the network. (CVE-2015-2601, CVE-2015-2808, CVE-2015-4000, CVE-2015-2625, CVE-2015-2613)
As a security improvement, this update modifies OpenJDK behavior to disable RC4 TLS/SSL cipher suites by default.
As a security improvement, this update modifies OpenJDK behavior to reject DH key sizes below 768 bits by default, preventing a possible downgrade attack.
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (CVE-2015-2621, CVE-2015-2632)
A vulnerability was discovered with how the JNDI component of the OpenJDK JRE handles DNS resolutions. A remote attacker could exploit this to cause a denial of service. (CVE-2015-4749)
- Record
USN-2696-1- Updated
- 2026-11-02
Affected products
- canonical ubuntu linux
- debian linux
- fujitsu sparc enterprise m3000 firmware
- fujitsu sparc enterprise m4000 firmware
- fujitsu sparc enterprise m5000 firmware
- fujitsu sparc enterprise m8000 firmware
- fujitsu sparc enterprise m9000 firmware
- huawei 9700 firmware
- huawei e6000 firmware
- huawei e9000 firmware
- huawei oceanstor 18500 firmware
- huawei oceanstor 18800 firmware
Show 49 moreShow less
- huawei oceanstor 18800f firmware
- huawei oceanstor 9000 firmware
- huawei oceanstor cse firmware
- huawei oceanstor hvs85t firmware
- huawei oceanstor replicationdirector
- huawei oceanstor s2600t firmware
- huawei oceanstor s5500t firmware
- huawei oceanstor s5600t firmware
- huawei oceanstor s5800t firmware
- huawei oceanstor s6800t firmware
- huawei oceanstor vis6600t firmware
- huawei policy center
- huawei quidway s9300 firmware
- huawei s12700 firmware
- huawei s2700 firmware
- huawei s2750 firmware
- huawei s3700 firmware
- huawei s5700ei firmware
- huawei s5700hi firmware
- huawei s5700li firmware
- huawei s5700s-li firmware
- huawei s5700si firmware
- huawei s5710ei firmware
- huawei s5710hi firmware
- huawei s5720ei firmware
- huawei s5720hi firmware
- huawei s6700 firmware
- huawei s7700 firmware
- huawei smc2.0
- huawei te60 firmware
- huawei ultravr
- ibm cognos metrics manager
- opensuse
- oracle communications application session controller
- oracle communications policy management
- oracle http server
- oracle integrated lights out manager firmware
- redhat enterprise linux desktop
- redhat enterprise linux eus
- redhat enterprise linux server
- redhat enterprise linux server aus
- redhat enterprise linux server tus
- redhat enterprise linux workstation
- redhat satellite
- suse linux enterprise debuginfo
- suse linux enterprise desktop
- suse linux enterprise server
- suse linux enterprise software development kit
- suse manager
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:6.0 From an advisory covering 14 CVEs |
before 6b36-1.13.8-1~deb6u1, plus listed versions 6b18-1.8.10-0+squeeze16b18-1.8.10-0+squeeze26b18-1.8.10-0~lenny16b18-1.8.10-0~lenny26b18-1.8.13-0+squeeze1 Show 45 moreShow less6b18-1.8.13-0+squeeze26b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.16b18-1.8.9-0.1~squeeze16b20-1.9-16b20-1.9.1-16b20-1.9.2-16b20-1.9.2-26b20~pre1-16b20~pre1-26b21~pre1-16b22-1.10-16b22-1.10-26b22-1.10-36b22-1.10.1-16b22-1.10.1~pre1-16b23~pre10-16b23~pre11-16b23~pre2-16b23~pre2-26b23~pre3-16b23~pre4-16b23~pre4-26b23~pre5-16b23~pre6-16b23~pre6-1+s390x6b23~pre7-16b23~pre8-16b23~pre8-26b23~pre9-16b23~pre9-26b24-1.11-16b24-1.11-26b24-1.11-36b24-1.11-4 |
6b36-1.13.8-1~deb6u1 |
openjdk-7Debian:7 From an advisory covering 23 CVEs |
before 7u79-2.5.6-1~deb7u1, plus listed versions 7u13-2.3.6-17u15-2.3.7-17u17-2.3.8-17u17-2.3.8-27u21-2.3.9-1 Show 45 moreShow less7u21-2.3.9-27u21-2.3.9-37u21-2.3.9-47u21-2.3.9-57u21-2.3.9-5+powerpcspe17u25-2.3.10-17u25-2.3.10-1+alpha7u25-2.3.10-1~deb7u17u25-2.3.10-27u25-2.3.10-2+powerpcspe17u25-2.3.12-17u25-2.3.12-1+alpha7u25-2.3.12-27u25-2.3.12-37u25-2.3.12-47u25-2.3.12-4+alpha7u3-2.1.7-17u45-2.4.3-17u45-2.4.3-2.37u45-2.4.3-37u45-2.4.3-47u45-2.4.3-4+alpha7u45-2.4.3-4+b1+alpha7u45-2.4.3-57u51-2.4.4-17u51-2.4.5-17u51-2.4.5-27u51-2.4.6-17u51-2.4.6~pre1-17u55-2.4.7-17u55-2.4.7-1~deb7u17u55-2.4.7-27u60-2.5.0-17u60-2.5.0-27u65-2.5.1-17u65-2.5.1-27u65-2.5.1-2~deb7u17u65-2.5.1-37u65-2.5.1-47u65-2.5.1-57u65-2.5.1-5~deb7u17u65-2.5.2-17u65-2.5.2-27u65-2.5.2-37u65-2.5.2-4 |
7u79-2.5.6-1~deb7u1 |
openjdk-7Debian:8 From an advisory covering 23 CVEs |
before 7u79-2.5.6-1~deb8u1, plus listed versions 7u75-2.5.4-27u75-2.5.4-37u79-2.5.5-17u79-2.5.5-1~deb7u17u79-2.5.5-1~deb8u17u79-2.5.6-1~deb7u1 |
7u79-2.5.6-1~deb8u1 |
openjdk-6Debian:7 From an advisory covering 15 CVEs |
before 6b36-1.13.8-1~deb7u1, plus listed versions 6b27-1.12.5-16b27-1.12.5-26b27-1.12.6-16b27-1.12.6-1~deb6u16b27-1.12.6-1~deb7u1 Show 27 moreShow less6b27-1.12.7-16b27-1.12.7-26b29-1.13.0-16b29-1.13.0-26b30-1.13.1-16b30-1.13.2-16b30-1.13.2-26b31-1.13.3-16b31-1.13.3-1~deb6u16b31-1.13.3-1~deb7u16b32-1.13.4-16b32-1.13.4-1~deb7u16b32-1.13.4-26b32-1.13.4-36b32-1.13.4-46b32-1.13.4-4.16b33-1.13.5-16b33-1.13.5-26b33-1.13.5-2~deb6u16b33-1.13.5-2~deb7u16b34-1.13.6-16b34-1.13.6-1~deb6u16b34-1.13.6-1~deb7u16b35-1.13.7-16b35-1.13.7-1~deb6u16b35-1.13.7-1~deb7u16b36-1.13.8-1~deb6u1 |
6b36-1.13.8-1~deb7u1 |
java-1.7.0-openjdkMageia:4 From an advisory covering 14 CVEs |
before 1.7.0.85-2.6.1.1.mga4 | 1.7.0.85-2.6.1.1.mga4 |
java-1.8.0-openjdkMageia:5 From an advisory covering 16 CVEs |
before 1.8.0.51-1.b16.1.mga5 | 1.8.0.51-1.b16.1.mga5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.7.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs |
before 1:1.7.0.9.0-1jpp.1.el5 | 1:1.7.0.9.0-1jpp.1.el5 |
java-1.7.1-ibmRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el6_6 | 1:1.7.1.3.0-1jpp.2.el6_6 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el6_6 | 1:1.7.1.3.0-1jpp.2.el6_6 |
java-1.7.1-ibm-develRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el6_6 | 1:1.7.1.3.0-1jpp.2.el6_6 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el6_6 | 1:1.7.1.3.0-1jpp.2.el6_6 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el6_6 | 1:1.7.1.3.0-1jpp.2.el6_6 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el6_6 | 1:1.7.1.3.0-1jpp.2.el6_6 |
java-1.7.1-ibmRed Hat:rhel_extras:7 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el7_1 | 1:1.7.1.3.0-1jpp.2.el7_1 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el7_1 | 1:1.7.1.3.0-1jpp.2.el7_1 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el7_1 | 1:1.7.1.3.0-1jpp.2.el7_1 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el7_1 | 1:1.7.1.3.0-1jpp.2.el7_1 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el7_1 | 1:1.7.1.3.0-1jpp.2.el7_1 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 13 CVEs |
before 1:1.7.1.3.0-1jpp.2.el7_1 | 1:1.7.1.3.0-1jpp.2.el7_1 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el5 | 1:1.5.0.16.10-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 12 CVEs |
before 1:1.5.0.16.10-1jpp.1.el6_6 | 1:1.5.0.16.10-1jpp.1.el6_6 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el5 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el5 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el5 | 1:1.6.0.16.4-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibmRed Hat:network_satellite:5.7::el6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.7::el6 From an advisory covering 13 CVEs |
before 1:1.6.0.16.4-1jpp.1.el6_6 | 1:1.6.0.16.4-1jpp.1.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-0.b16.el6_6 | 1:1.8.0.51-0.b16.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-accessibilityRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:7::client From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdkRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-accessibilityRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:7::computenode From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdkRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-accessibilityRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:7::server From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.ael7b_1 | 1:1.8.0.51-1.b16.ael7b_1 |
java-1.8.0-openjdkRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-accessibilityRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:7::workstation From an advisory covering 16 CVEs |
before 1:1.8.0.51-1.b16.el7_1 | 1:1.8.0.51-1.b16.el7_1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el6_6 | 1:1.7.0.85-2.6.1.3.el6_6 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::computenode From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.ael7b_1 | 1:1.7.0.85-2.6.1.2.ael7b_1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-headlessRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-accessibilityRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:7::workstation From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.2.el7_1 | 1:1.7.0.85-2.6.1.2.el7_1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 1:1.7.0.85-2.6.1.3.el5_11 | 1:1.7.0.85-2.6.1.3.el5_11 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.36-1.13.8.1.el5_11 | 1:1.6.0.36-1.13.8.1.el5_11 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.36-1.13.8.1.el5_11 | 1:1.6.0.36-1.13.8.1.el5_11 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.36-1.13.8.1.el5_11 | 1:1.6.0.36-1.13.8.1.el5_11 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 4 CVEs |
before 1.7.1_sr3.0-11.1 | 1.7.1_sr3.0-11.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 From an advisory covering 4 CVEs |
before 1.7.1_sr3.0-11.1 | 1.7.1_sr3.0-11.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 4 CVEs |
before 1.7.1_sr3.0-11.1 | 1.7.1_sr3.0-11.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 13 CVEs |
before 1.6.0_sr16.4-15.1 | 1.6.0_sr16.4-15.1 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 24 CVEs |
before 1.7.0.85-0.11.2 | 1.7.0.85-0.11.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 24 CVEs |
before 1.7.0.85-0.11.2 | 1.7.0.85-0.11.2 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 20 CVEs |
before 1.7.1_sr3.10-3.1 | 1.7.1_sr3.10-3.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 20 CVEs |
before 1.7.1_sr3.10-3.1 | 1.7.1_sr3.10-3.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 20 CVEs |
before 1.7.1_sr3.10-3.1 | 1.7.1_sr3.10-3.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 20 CVEs |
before 1.7.1_sr3.10-14.1 | 1.7.1_sr3.10-14.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server 12 From an advisory covering 20 CVEs |
before 1.7.1_sr3.10-14.1 | 1.7.1_sr3.10-14.1 |
java-1_7_1-ibmSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 20 CVEs |
before 1.7.1_sr3.10-14.1 | 1.7.1_sr3.10-14.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-22.2 | 1.6.0_sr16.7-22.2 |
java-1_7_0-ibmSUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 21 CVEs |
before 1.7.0_sr9.10-9.1 | 1.7.0_sr9.10-9.1 |
java-1_7_0-ibmSUSE:Linux Enterprise Server 11 SP2-LTSS From an advisory covering 21 CVEs |
before 1.7.0_sr9.10-9.1 | 1.7.0_sr9.10-9.1 |
java-1_7_0-ibmSUSE:Linux Enterprise Server 11 SP3 From an advisory covering 21 CVEs |
before 1.7.0_sr9.10-9.1 | 1.7.0_sr9.10-9.1 |
java-1_7_0-ibmSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 21 CVEs |
before 1.7.0_sr9.10-9.1 | 1.7.0_sr9.10-9.1 |
java-1_7_0-ibmSUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 21 CVEs |
before 1.7.0_sr9.10-9.1 | 1.7.0_sr9.10-9.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP1-LTSS From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP1-TERADATA From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP2-LTSS From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP3 From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 17 CVEs |
before 1.6.0_sr16.7-10.1 | 1.6.0_sr16.7-10.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Software Development Kit 11 SP3 From an advisory covering 31 CVEs |
before 1.6.0_sr16.15-46.1 | 1.6.0_sr16.15-46.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP2-LTSS From an advisory covering 31 CVEs |
before 1.6.0_sr16.15-46.1 | 1.6.0_sr16.15-46.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP3 From an advisory covering 31 CVEs |
before 1.6.0_sr16.15-46.1 | 1.6.0_sr16.15-46.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 31 CVEs |
before 1.6.0_sr16.15-46.1 | 1.6.0_sr16.15-46.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Server for SAP Applications 11 SP3 From an advisory covering 31 CVEs |
before 1.6.0_sr16.15-46.1 | 1.6.0_sr16.15-46.1 |
java-1_6_0-ibmSUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 31 CVEs |
before 1.6.0_sr16.15-27.1 | 1.6.0_sr16.15-27.1 |
openjdk-6Ubuntu:14.04:LTS |
before 6b36-1.13.8-0ubuntu1~14.04, plus listed versions 6b27-1.12.6-1ubuntu26b27-1.12.7-2ubuntu16b29-1.13.0-1ubuntu26b30-1.13.1-1ubuntu16b30-1.13.1-1ubuntu2 Show 6 moreShow less6b30-1.13.2-1ubuntu16b31-1.13.3-1ubuntu16b32-1.13.4-4ubuntu0.14.04.16b33-1.13.5-1ubuntu0.14.046b34-1.13.6-1ubuntu0.14.04.16b35-1.13.7-1ubuntu0.14.04.1 |
6b36-1.13.8-0ubuntu1~14.04 |
openjdk-7Ubuntu:14.04:LTS |
before 7u79-2.5.6-0ubuntu1.14.04.1, plus listed versions 7u25-2.3.12-4ubuntu37u25-2.3.12-4ubuntu57u45-2.4.3-3ubuntu17u45-2.4.3-3ubuntu27u45-2.4.3-4ubuntu1 Show 13 moreShow less7u45-2.4.3-4ubuntu27u51-2.4.4-1ubuntu17u51-2.4.5-1ubuntu17u51-2.4.6~pre1-1ubuntu27u51-2.4.6-1ubuntu37u51-2.4.6-1ubuntu47u55-2.4.7-1ubuntu17u65-2.5.1-4ubuntu1~0.14.04.17u65-2.5.1-4ubuntu1~0.14.04.27u65-2.5.2-3~14.047u71-2.5.3-0ubuntu0.14.04.17u75-2.5.4-1~trusty17u79-2.5.5-0ubuntu0.14.04.2 |
7u79-2.5.6-0ubuntu1.14.04.1 |
openjdk-7Ubuntu:14.04:LTS From an advisory covering 15 CVEs |
before 7u79-2.5.6-0ubuntu1.14.04.1, plus listed versions 7u25-2.3.12-4ubuntu37u25-2.3.12-4ubuntu57u45-2.4.3-3ubuntu17u45-2.4.3-3ubuntu27u45-2.4.3-4ubuntu1 Show 13 moreShow less7u45-2.4.3-4ubuntu27u51-2.4.4-1ubuntu17u51-2.4.5-1ubuntu17u51-2.4.6~pre1-1ubuntu27u51-2.4.6-1ubuntu37u51-2.4.6-1ubuntu47u55-2.4.7-1ubuntu17u65-2.5.1-4ubuntu1~0.14.04.17u65-2.5.1-4ubuntu1~0.14.04.27u65-2.5.2-3~14.047u71-2.5.3-0ubuntu0.14.04.17u75-2.5.4-1~trusty17u79-2.5.5-0ubuntu0.14.04.2 |
7u79-2.5.6-0ubuntu1.14.04.1 |
java-1_8_0-openjdkopenSUSE:Tumbleweed From an advisory covering 83 CVEs |
before 1.8.0.111-1.1 | 1.8.0.111-1.1 |
java-1_7_0-openjdkopenSUSE:Tumbleweed From an advisory covering 304 CVEs |
before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2808 is a medium vulnerability (CVSS 5.0) in Canonical Ubuntu Linux, published November 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 73.9%, the 99th percentile. Fixed in openjdk-6 6b36-1.13.8-0ubuntu1~14.04.
References
marc.info?l=bugtraq&m=143818140118771&w=2
rhn.redhat.com/errata/RHSA-2015-1243.html
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
Show 194 moreShow less
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256
kb.juniper.net/JSA10783
securitytracker.com/id/1033737
lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
www-304.ibm.com/support/docview.wss?uid=swg21960769
security.gentoo.org/glsa/201512-10
h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650
ubuntu.com/usn/USN-2706-1
kc.mcafee.com/corporate/index?page=content&id=SB10163
www-01.ibm.com/support/docview.wss?uid=swg1IV71892
huawei.com/en/psirt/security-advisories/hw-454055
debian.org/security/2015/dsa-3316
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922
blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf
www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm
securityfocus.com/bid/91787
secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2
nvd.nist.gov/vuln/detail/CVE-2015-2808
github.com/advisories/GHSA-jcj6-c96p-jcmm
advisories.mageia.org/MGASA-2015-0277.html
bugs.mageia.org/show_bug.cgi?id=16388
bugzilla.redhat.com/show_bug.cgi?id=1207101
blog.fuseyism.com/index.php/2015/07/19/icedtea-2-6-0-for-openjdk-7-released
access.redhat.com/errata/RHSA-2015:1006
ibm.com/developerworks/java/jdk/alerts
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1006.json
cve.org/CVERecord?id=CVE-2005-1080
people.redhat.com/~fweimer/rsa-crt-leaks.pdf
securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy
imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf
cisa.gov/known-exploited-vulnerabilities-catalog
weakdh.org
suse.com/support/update/announcement/2015/suse-su-20150343-1
bugzilla.suse.com/592934
ubuntu.com/security/CVE-2015-2808
This page doesn't list everything
Left out here: 57 package rows, 68 versions, 608 references and the rest of 15 source descriptions. The JSON record has them.