{"id":"CVE-2015-2808","aliases":["DLA-303-1","DSA-3316-1","DSA-3339-1","EUVD-2015-2896","GHSA-jcj6-c96p-jcmm","MGASA-2015-0277","MGASA-2015-0280","RHSA-2015:1006","RHSA-2015:1007","RHSA-2015:1020","RHSA-2015:1021","RHSA-2015:1091","RHSA-2015:1228","RHSA-2015:1229","RHSA-2015:1230","RHSA-2015:1241","RHSA-2015:1242","RHSA-2015:1243","RHSA-2015:1526","SUSE-SU-2015:0343-1","SUSE-SU-2015:0343-2","SUSE-SU-2015:0344-1","SUSE-SU-2015:0392-1","SUSE-SU-2015:1073-1","SUSE-SU-2015:1086-1","SUSE-SU-2015:1086-2","SUSE-SU-2015:1086-3","SUSE-SU-2015:1086-4","SUSE-SU-2015:1161-1","SUSE-SU-2015:1319-1","SUSE-SU-2015:1320-1","SUSE-SU-2015:1329-1","SUSE-SU-2015:1331-1","SUSE-SU-2015:1345-1","SUSE-SU-2015:1375-1","SUSE-SU-2015:1509-1","SUSE-SU-2015:2166-1","SUSE-SU-2015:2192-1","UBUNTU-CVE-2015-2808","USN-2696-1","openSUSE-SU-2024:10197-1","openSUSE-SU-2024:10534-1"],"status":"published","title":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.73851,"percentile":0.9948,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327"],"published":"2013-11-14T23:20:58Z","modified":"2026-06-29T10:09:45Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-6","fixed_in":["6b36-1.13.8-0ubuntu1~14.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","fixed_in":["7u79-2.5.6-0ubuntu1.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"openjdk-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b36-1.13.8-1~deb6u1"}]}],"versions":["6b18-1.8.10-0+squeeze1","6b18-1.8.10-0+squeeze2","6b18-1.8.10-0~lenny1","6b18-1.8.10-0~lenny2","6b18-1.8.13-0+squeeze1","6b18-1.8.13-0+squeeze2","6b18-1.8.3-2","6b18-1.8.3-2+squeeze1","6b18-1.8.4-1","6b18-1.8.5-1","6b18-1.8.7-1","6b18-1.8.7-2","6b18-1.8.7-2~lenny1","6b18-1.8.7-2~squeeze1","6b18-1.8.7-3","6b18-1.8.7-4","6b18-1.8.7-5","6b18-1.8.9-0.1","6b18-1.8.9-0.1~squeeze1","6b20-1.9-1","6b20-1.9.1-1","6b20-1.9.2-1","6b20-1.9.2-2","6b20~pre1-1","6b20~pre1-2","6b21~pre1-1","6b22-1.10-1","6b22-1.10-2","6b22-1.10-3","6b22-1.10.1-1","6b22-1.10.1~pre1-1","6b23~pre10-1","6b23~pre11-1","6b23~pre2-1","6b23~pre2-2","6b23~pre3-1","6b23~pre4-1","6b23~pre4-2","6b23~pre5-1","6b23~pre6-1","6b23~pre6-1+s390x","6b23~pre7-1","6b23~pre8-1","6b23~pre8-2","6b23~pre9-1","6b23~pre9-2","6b24-1.11-1","6b24-1.11-2","6b24-1.11-3","6b24-1.11-4","6b24-1.11.1-1","6b24-1.11.1-2","6b24-1.11.1-3","6b24-1.11.1-4","6b24-1.11.1-5","6b24-1.11.1-6","6b24-1.11.3-1","6b24-1.11.3-2","6b24-1.11.4-1","6b24-1.11.4-2","6b24-1.11.4-3","6b24-1.11.5-1","6b24~pre1-1","6b24~pre2-1","6b24~pre4-1","6b27-1.12-1","6b27-1.12.1-1","6b27-1.12.1-2","6b27-1.12.1-2+alpha","6b27-1.12.3-1","6b27-1.12.4-1","6b27-1.12.5-1","6b27-1.12.5-2","6b27-1.12.6-1","6b27-1.12.6-1~deb6u1","6b27-1.12.6-1~deb7u1","6b27-1.12.7-1","6b27-1.12.7-2","6b29-1.13.0-1","6b29-1.13.0-2","6b30-1.13.1-1","6b30-1.13.2-1","6b30-1.13.2-2","6b31-1.13.3-1","6b31-1.13.3-1~deb6u1","6b31-1.13.3-1~deb7u1","6b32-1.13.4-1","6b32-1.13.4-1~deb7u1","6b32-1.13.4-2","6b32-1.13.4-3","6b32-1.13.4-4","6b32-1.13.4-4.1","6b33-1.13.5-1","6b33-1.13.5-2","6b33-1.13.5-2~deb6u1","6b33-1.13.5-2~deb7u1","6b34-1.13.6-1","6b34-1.13.6-1~deb6u1","6b34-1.13.6-1~deb7u1","6b35-1.13.7-1","6b35-1.13.7-1~deb6u1","6b35-1.13.7-1~deb7u1"],"bundled":14},{"source":"osv","ecosystem":"Debian:7","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.6-1~deb7u1"}]}],"versions":["7u13-2.3.6-1","7u15-2.3.7-1","7u17-2.3.8-1","7u17-2.3.8-2","7u21-2.3.9-1","7u21-2.3.9-2","7u21-2.3.9-3","7u21-2.3.9-4","7u21-2.3.9-5","7u21-2.3.9-5+powerpcspe1","7u25-2.3.10-1","7u25-2.3.10-1+alpha","7u25-2.3.10-1~deb7u1","7u25-2.3.10-2","7u25-2.3.10-2+powerpcspe1","7u25-2.3.12-1","7u25-2.3.12-1+alpha","7u25-2.3.12-2","7u25-2.3.12-3","7u25-2.3.12-4","7u25-2.3.12-4+alpha","7u3-2.1.7-1","7u45-2.4.3-1","7u45-2.4.3-2.3","7u45-2.4.3-3","7u45-2.4.3-4","7u45-2.4.3-4+alpha","7u45-2.4.3-4+b1+alpha","7u45-2.4.3-5","7u51-2.4.4-1","7u51-2.4.5-1","7u51-2.4.5-2","7u51-2.4.6-1","7u51-2.4.6~pre1-1","7u55-2.4.7-1","7u55-2.4.7-1~deb7u1","7u55-2.4.7-2","7u60-2.5.0-1","7u60-2.5.0-2","7u65-2.5.1-1","7u65-2.5.1-2","7u65-2.5.1-2~deb7u1","7u65-2.5.1-3","7u65-2.5.1-4","7u65-2.5.1-5","7u65-2.5.1-5~deb7u1","7u65-2.5.2-1","7u65-2.5.2-2","7u65-2.5.2-3","7u65-2.5.2-4","7u65-2.5.2-4.1","7u7-2.3.2-1","7u7-2.3.2a-1","7u71-2.5.3-1","7u71-2.5.3-2","7u71-2.5.3-2~deb7u1","7u75-2.5.4-1","7u75-2.5.4-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u9-2.3.3-1","7u9-2.3.4-1","7u9-2.3.5~pre1-1"],"bundled":23},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.6-1~deb8u1"}]}],"versions":["7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1~deb7u1"],"bundled":23},{"source":"osv","ecosystem":"Debian:7","package":"openjdk-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b36-1.13.8-1~deb7u1"}]}],"versions":["6b27-1.12.5-1","6b27-1.12.5-2","6b27-1.12.6-1","6b27-1.12.6-1~deb6u1","6b27-1.12.6-1~deb7u1","6b27-1.12.7-1","6b27-1.12.7-2","6b29-1.13.0-1","6b29-1.13.0-2","6b30-1.13.1-1","6b30-1.13.2-1","6b30-1.13.2-2","6b31-1.13.3-1","6b31-1.13.3-1~deb6u1","6b31-1.13.3-1~deb7u1","6b32-1.13.4-1","6b32-1.13.4-1~deb7u1","6b32-1.13.4-2","6b32-1.13.4-3","6b32-1.13.4-4","6b32-1.13.4-4.1","6b33-1.13.5-1","6b33-1.13.5-2","6b33-1.13.5-2~deb6u1","6b33-1.13.5-2~deb7u1","6b34-1.13.6-1","6b34-1.13.6-1~deb6u1","6b34-1.13.6-1~deb7u1","6b35-1.13.7-1","6b35-1.13.7-1~deb6u1","6b35-1.13.7-1~deb7u1","6b36-1.13.8-1~deb6u1"],"bundled":15},{"source":"osv","ecosystem":"Mageia:4","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.85-2.6.1.1.mga4"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:5","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.51-1.b16.1.mga5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-0.b16.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.ael7b_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1.b16.el7_1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.ael7b_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-2.6.1.3.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.51-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.1.el5_11"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.1.el5_11"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.1.el5_11"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.1.el5_11"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.1.el5_11"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.1.el5_11"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el6_6"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.85-1jpp.2.el7_1"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el5_11"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el5_11"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el5_11"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el5_11"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el5_11"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el5_11"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el6_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el6_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el6_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el6_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el6_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el6_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el7_1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el7_1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el7_1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el7_1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el7_1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.101-1jpp.1.el7_1"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el5_11"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el6_7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.6.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.6.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.6.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.6.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.6.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.6.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.36-1.13.8.1.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.0-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.0-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.0-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.4-15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.85-18.2"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.85-18.2"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.85-18.2"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.85-0.11.2"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.85-0.11.2"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.10-3.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.10-3.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.10-3.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.10-14.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.10-14.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.10-14.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-22.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.10-9.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.10-9.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.10-9.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.10-9.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.10-9.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP1-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP1-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.7-10.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.15-46.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.15-46.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.15-46.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.15-46.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.15-46.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.15-27.1"}]}],"bundled":31},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b36-1.13.8-0ubuntu1~14.04"}]}],"versions":["6b27-1.12.6-1ubuntu2","6b27-1.12.7-2ubuntu1","6b29-1.13.0-1ubuntu2","6b30-1.13.1-1ubuntu1","6b30-1.13.1-1ubuntu2","6b30-1.13.2-1ubuntu1","6b31-1.13.3-1ubuntu1","6b32-1.13.4-4ubuntu0.14.04.1","6b33-1.13.5-1ubuntu0.14.04","6b34-1.13.6-1ubuntu0.14.04.1","6b35-1.13.7-1ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.6-0ubuntu1.14.04.1"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.6-0ubuntu1.14.04.1"}]}],"versions":["7u25-2.3.12-4ubuntu3","7u25-2.3.12-4ubuntu5","7u45-2.4.3-3ubuntu1","7u45-2.4.3-3ubuntu2","7u45-2.4.3-4ubuntu1","7u45-2.4.3-4ubuntu2","7u51-2.4.4-1ubuntu1","7u51-2.4.5-1ubuntu1","7u51-2.4.6~pre1-1ubuntu2","7u51-2.4.6-1ubuntu3","7u51-2.4.6-1ubuntu4","7u55-2.4.7-1ubuntu1","7u65-2.5.1-4ubuntu1~0.14.04.1","7u65-2.5.1-4ubuntu1~0.14.04.2","7u65-2.5.2-3~14.04","7u71-2.5.3-0ubuntu0.14.04.1","7u75-2.5.4-1~trusty1","7u79-2.5.5-0ubuntu0.14.04.2"],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-1.1"}]}],"bundled":83},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-1.1"}]}],"bundled":304}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fujitsu","product":"sparc_enterprise_m3000_firmware"},{"vendor":"fujitsu","product":"sparc_enterprise_m4000_firmware"},{"vendor":"fujitsu","product":"sparc_enterprise_m5000_firmware"},{"vendor":"fujitsu","product":"sparc_enterprise_m8000_firmware"},{"vendor":"fujitsu","product":"sparc_enterprise_m9000_firmware"},{"vendor":"huawei","product":"9700_firmware"},{"vendor":"huawei","product":"e6000_firmware"},{"vendor":"huawei","product":"e9000_firmware"},{"vendor":"huawei","product":"oceanstor_18500_firmware"},{"vendor":"huawei","product":"oceanstor_18800_firmware"},{"vendor":"huawei","product":"oceanstor_18800f_firmware"},{"vendor":"huawei","product":"oceanstor_9000_firmware"},{"vendor":"huawei","product":"oceanstor_cse_firmware"},{"vendor":"huawei","product":"oceanstor_hvs85t_firmware"},{"vendor":"huawei","product":"oceanstor_replicationdirector"},{"vendor":"huawei","product":"oceanstor_s2600t_firmware"},{"vendor":"huawei","product":"oceanstor_s5500t_firmware"},{"vendor":"huawei","product":"oceanstor_s5600t_firmware"},{"vendor":"huawei","product":"oceanstor_s5800t_firmware"},{"vendor":"huawei","product":"oceanstor_s6800t_firmware"},{"vendor":"huawei","product":"oceanstor_vis6600t_firmware"},{"vendor":"huawei","product":"policy_center"},{"vendor":"huawei","product":"quidway_s9300_firmware"},{"vendor":"huawei","product":"s12700_firmware"},{"vendor":"huawei","product":"s2700_firmware"},{"vendor":"huawei","product":"s2750_firmware"},{"vendor":"huawei","product":"s3700_firmware"},{"vendor":"huawei","product":"s5700ei_firmware"},{"vendor":"huawei","product":"s5700hi_firmware"},{"vendor":"huawei","product":"s5700li_firmware"},{"vendor":"huawei","product":"s5700s-li_firmware"},{"vendor":"huawei","product":"s5700si_firmware"},{"vendor":"huawei","product":"s5710ei_firmware"},{"vendor":"huawei","product":"s5710hi_firmware"},{"vendor":"huawei","product":"s5720ei_firmware"},{"vendor":"huawei","product":"s5720hi_firmware"},{"vendor":"huawei","product":"s6700_firmware"},{"vendor":"huawei","product":"s7700_firmware"},{"vendor":"huawei","product":"smc2.0"},{"vendor":"huawei","product":"te60_firmware"},{"vendor":"huawei","product":"ultravr"},{"vendor":"ibm","product":"cognos_metrics_manager"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"communications_application_session_controller"},{"vendor":"oracle","product":"communications_policy_management"},{"vendor":"oracle","product":"http_server"},{"vendor":"oracle","product":"integrated_lights_out_manager_firmware"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite"},{"vendor":"suse","product":"linux_enterprise_debuginfo"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"},{"vendor":"suse","product":"manager"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=143818140118771\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1243.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1007.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143817899717054\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_transferred","Third Party Advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1006.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256","tags":["x_transferred","Third Party Advisory"]},{"url":"https://kb.juniper.net/JSA10783","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033737","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_transferred","Patch","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036222","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960769","tags":["x_transferred","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201512-10","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1229.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032600","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1032910","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2706-1","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1526.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143817021313142\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032599","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21903565","tags":["x_transferred","Third Party Advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190","tags":["x_transferred","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380","tags":["x_transferred","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10163","tags":["x_transferred","Broken Link"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032734","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033769","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1032707","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1091.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1228.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032708","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/hw-454055","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3316","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033415","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709","tags":["x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144104565600964\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","tags":["x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033432","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143629696317098\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032858","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032788","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2696-1","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf","tags":["x_transferred","Technical Description","Third Party Advisory","report"]},{"url":"http://www.debian.org/security/2015/dsa-3339","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1020.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1242.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727","tags":["x_transferred","Third Party Advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","tags":["x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033431","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm","tags":["x_transferred","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032868","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144059703728085\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","tags":["x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1241.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140","tags":["x_transferred","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705","tags":["x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1230.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","tags":["x_transferred","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143456209711959\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033386","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143741441012338\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033072","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789","tags":["x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119","tags":["x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1021.html","tags":["vendor-advisory","x_transferred","Third Party Advisory"]},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960015","tags":["x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","tags":["x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144059660127919\u0026w=2","tags":["vendor-advisory","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73684","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1032990","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1033071","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2808","tags":["advisory"]},{"url":"https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2"},{"url":"https://github.com/advisories/GHSA-jcj6-c96p-jcmm"},{"url":"https://advisories.mageia.org/MGASA-2015-0277.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c11","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223211#c33","tags":["report"]},{"url":"http://blog.fuseyism.com/index.php/2015/07/19/icedtea-2-6-0-for-openjdk-7-released/","tags":["web"]},{"url":"http://blog.fuseyism.com/index.php/2015/07/21/security-icedtea-2-6-1-for-openjdk-7-released/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-1229.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0280.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16387","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-1228.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1006","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c4","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=606442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219223","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1006.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1080","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1080","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0138","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0192","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0458","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0477","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0478","tags":["advisory"]},{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","tags":["article"]},{"url":"https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0488","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0488","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2808","tags":["advisory","report"]},{"url":"http://www.imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1007","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1007.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1020","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1020.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1021","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://www.ibm.com/developerworks/java/jdk/lifecycle/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1021.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1091","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1091.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1228","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243139","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1228.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2590","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2601","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2601","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2621","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2625","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2628","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2628","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2632","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4000","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4000","tags":["advisory"]},{"url":"https://access.redhat.com/articles/1456263","tags":["article"]},{"url":"https://weakdh.org/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4731","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4731","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4732","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4732","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4733","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4733","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4733","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4748","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4748","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4760","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4760","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4760","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1229","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1230","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1230.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1241","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243300","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1241.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2613","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2613","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2619","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2664","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2664","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4729","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4736","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4736","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4736","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1242","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243288","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1242.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2596","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2596","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2596","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1243","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1243.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1526","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1526.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150343-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/592934","tags":["report"]},{"url":"https://bugzilla.suse.com/817062","tags":["report"]},{"url":"https://bugzilla.suse.com/819285","tags":["report"]},{"url":"https://bugzilla.suse.com/819288","tags":["report"]},{"url":"https://bugzilla.suse.com/823034","tags":["report"]},{"url":"https://bugzilla.suse.com/829212","tags":["report"]},{"url":"https://bugzilla.suse.com/849212","tags":["report"]},{"url":"https://bugzilla.suse.com/861782","tags":["report"]},{"url":"https://bugzilla.suse.com/862064","tags":["report"]},{"url":"https://bugzilla.suse.com/877429","tags":["report"]},{"url":"https://bugzilla.suse.com/891701","tags":["report"]},{"url":"https://bugzilla.suse.com/904889","tags":["report"]},{"url":"https://bugzilla.suse.com/912434","tags":["report"]},{"url":"https://bugzilla.suse.com/912447","tags":["report"]},{"url":"https://bugzilla.suse.com/916265","tags":["report"]},{"url":"https://bugzilla.suse.com/916266","tags":["report"]},{"url":"https://bugzilla.suse.com/930365","tags":["report"]},{"url":"https://bugzilla.suse.com/931702","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2808","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150343-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/877430","tags":["report"]},{"url":"https://bugzilla.suse.com/891700","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150344-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/772640","tags":["report"]},{"url":"https://bugzilla.suse.com/780897","tags":["report"]},{"url":"https://bugzilla.suse.com/788750","tags":["report"]},{"url":"https://bugzilla.suse.com/798535","tags":["report"]},{"url":"https://bugzilla.suse.com/813939","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901239","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2455","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150392-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/666744","tags":["report"]},{"url":"https://bugzilla.suse.com/771808","tags":["report"]},{"url":"https://bugzilla.suse.com/773021","tags":["report"]},{"url":"https://bugzilla.suse.com/778629","tags":["report"]},{"url":"https://bugzilla.suse.com/785631","tags":["report"]},{"url":"https://bugzilla.suse.com/808625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1481","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151073-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/931693","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-4/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151161-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151319-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/938248","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4760","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151320-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151329-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/935540","tags":["report"]},{"url":"https://bugzilla.suse.com/938895","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1931","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151331-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151345-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/936844","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151375-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151509-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/941939","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152166-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/955131","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5006","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152192-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-2808","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2696-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2706-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-2590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4760","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8472","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","status":"published","published":"2015-04-01T00:00:00Z","modified":"2026-05-28T12:53:51.914Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:35:41.621934Z"}],"euvd":[{"id":"EUVD-2015-2896","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","status":"published","published":"2015-04-01T00:00:00Z","modified":"2026-05-28T12:53:51Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T18:21:03.0662Z"}],"ghsa":[{"id":"GHSA-jcj6-c96p-jcmm","title":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","status":"published","published":"2022-05-13T01:13:25Z","modified":"2026-05-27T18:32:34Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:08:21.006908Z"}],"nvd":[{"id":"CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","status":"published","published":"2015-04-01T02:00:35.097Z","modified":"2026-06-17T00:24:47.52Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"RHSA-2015:1228","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-15T22:44:14Z","modified":"2026-06-29T10:09:34Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1229","title":"Red Hat Security Advisory: java-1.7.0-openjdk security update","status":"published","published":"2024-09-13T10:36:57Z","modified":"2026-06-29T10:09:35Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1230","title":"Red Hat Security Advisory: java-1.7.0-openjdk security update","status":"published","published":"2024-09-13T10:37:08Z","modified":"2026-06-29T10:09:36Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1241","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-13T10:37:14Z","modified":"2026-06-29T10:09:37Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1242","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-13T10:37:21Z","modified":"2026-06-29T10:09:37Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1243","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-13T10:36:52Z","modified":"2026-06-29T10:09:38Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1526","title":"Red Hat Security Advisory: java-1.6.0-openjdk security update","status":"published","published":"2024-09-13T10:36:44Z","modified":"2026-06-29T10:09:45Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"UBUNTU-CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","status":"published","published":"2015-03-31T00:00:00Z","modified":"2026-05-29T18:00:10.169086992Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"DLA-303-1","title":"openjdk-6 - security update","status":"published","published":"2015-08-27T00:00:00Z","modified":"2026-03-09T01:20:37.765441Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-3316-1","title":"openjdk-7 - security update","status":"published","published":"2015-07-25T00:00:00Z","modified":"2026-03-09T01:23:20.738808Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3339-1","title":"openjdk-6 - security update","status":"published","published":"2015-08-19T00:00:00Z","modified":"2026-03-09T01:22:03.16892Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0277","title":"Updated java-1.7.0-openjdk package fixes security vulnerabilities","description":"Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI\ncomponents in OpenJDK. An untrusted Java application or applet could use\nthese flaws to bypass Java sandbox restrictions (CVE-2015-4760,\nCVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732,\nCVE-2015-4733).\n\nA flaw was found in the way the Libraries component of OpenJDK verified\nOnline Certificate Status Protocol (OCSP) responses. An OCSP response with\nno nextUpdate date specified was incorrectly handled as having unlimited\nvalidity, possibly causing a revoked X.509 certificate to be interpreted\nas  valid (CVE-2015-4748).\n\nIt was discovered that the JCE component in OpenJDK failed to use constant\ntime comparisons in multiple cases. An attacker could possibly use these\nflaws to disclose sensitive information by measuring the time used to\nperform operations using these non-constant time comparisons\n(CVE-2015-2601).\n\nA flaw was found in the RC4 encryption algorithm. When using certain keys\nfor RC4 encryption, an attacker could obtain portions of the plain text\nfrom the cipher text without the knowledge of the encryption key\n(CVE-2015-2808).\n\nNote: With this update, OpenJDK now disables RC4 TLS/SSL cipher suites by\ndefault to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla bug\n1207101, linked to in the References section, for additional details about\nthis change.\n\nA flaw was found in the way the TLS protocol composed the Diffie-Hellman\n(DH) key exchange. A man-in-the-middle attacker could use this flaw to\nforce the use of weak 512 bit export-grade keys during the key exchange,\nallowing them do decrypt all traffic (CVE-2015-4000).\n\nNote: This update forces the TLS/SSL client implementation in OpenJDK to\nreject DH key sizes below 768 bits, which prevents sessions to be\ndowngraded to export-grade keys. Refer to Red Hat Bugzilla bug 1223211,\nlinked to in the References section, for additional details about this\nchange.\n\nIt was discovered that the JNDI component in OpenJDK did not handle DNS\nresolutions correctly. An attacker able to trigger such DNS errors could\ncause a Java application using JNDI to consume memory and CPU time, and\npossibly block further DNS resolution (CVE-2015-4749).\n\nMultiple information leak flaws were found in the JMX and 2D components in\nOpenJDK. An untrusted Java application or applet could use this flaw to\nbypass certain Java sandbox restrictions (CVE-2015-2621, CVE-2015-2632).\n\nA flaw was found in the way the JSSE component in OpenJDK performed X.509\ncertificate identity verification when establishing a TLS/SSL connection\nto  a host identified by an IP address. In certain cases, the certificate\nwas accepted as valid if it was issued for a host name to which the IP\naddress resolves rather than for the IP address (CVE-2015-2625)\n","status":"published","published":"2015-07-23T09:39:14Z","modified":"2026-04-16T06:23:13.741877138Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0280","title":"Updated java-1.8.0-openjdk package fixes security vulnerabilities","description":"Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI\ncomponents in OpenJDK. An untrusted Java application or applet could use\nthese flaws to bypass Java sandbox restrictions (CVE-2015-4760,\nCVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732,\nCVE-2015-4733).\n\nA flaw was found in the way the Libraries component of OpenJDK verified\nOnline Certificate Status Protocol (OCSP) responses. An OCSP response with\nno nextUpdate date specified was incorrectly handled as having unlimited\nvalidity, possibly causing a revoked X.509 certificate to be interpreted\nas valid (CVE-2015-4748).\n\nIt was discovered that the JCE component in OpenJDK failed to use constant\ntime comparisons in multiple cases. An attacker could possibly use these\nflaws to disclose sensitive information by measuring the time used to\nperform operations using these non-constant time comparisons\n(CVE-2015-2601).\n\nIt was discovered that the GCM (Galois Counter Mode) implementation in\nthe Security component of OpenJDK failed to properly perform a null check.\nThis could cause the Java Virtual Machine to crash when an application\nperformed encryption using a block cipher in the GCM mode (CVE-2015-2659).\n\nA flaw was found in the RC4 encryption algorithm. When using certain keys\nfor RC4 encryption, an attacker could obtain portions of the plain text\nfrom the cipher text without the knowledge of the encryption key\n(CVE-2015-2808).\n\nNote: With this update, OpenJDK now disables RC4 TLS/SSL cipher suites by\ndefault to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla bug\n1207101, linked to in the References section, for additional details about\nthis change.\n\nA flaw was found in the way the TLS protocol composed the Diffie-Hellman\n(DH) key exchange. A man-in-the-middle attacker could use this flaw to\nforce the use of weak 512 bit export-grade keys during the key exchange,\nallowing them do decrypt all traffic (CVE-2015-4000).\n\nNote: This update forces the TLS/SSL client implementation in OpenJDK to\nreject DH key sizes below 768 bits, which prevents sessions to be\ndowngraded to export-grade keys. Refer to Red Hat Bugzilla bug 1223211,\nlinked to in the References section, for additional details about this\nchange.\n\nIt was discovered that the JNDI component in OpenJDK did not handle DNS\nresolutions correctly. An attacker able to trigger such DNS errors could\ncause a Java application using JNDI to consume memory and CPU time, and\npossibly block further DNS resolution (CVE-2015-4749).\n\nMultiple information leak flaws were found in the JMX and 2D components in\nOpenJDK. An untrusted Java application or applet could use this flaw to\nbypass certain Java sandbox restrictions (CVE-2015-2621, CVE-2015-2632).\n\nA flaw was found in the way the JSSE component in OpenJDK performed X.509\ncertificate identity verification when establishing a TLS/SSL connection\nto a host identified by an IP address. In certain cases, the certificate\nwas accepted as valid if it was issued for a host name to which the IP\naddress  resolves rather than for the IP address (CVE-2015-2625).\n\nMultiple insecure temporary file use issues were found in the way the\nHotspot component in OpenJDK created performance statistics and error log\nfiles. A local attacker could possibly make a victim using OpenJDK\noverwrite arbitrary files using a symlink attack. Note: This issue was\noriginally fixed as CVE-2015-0383, but the fix was regressed in a later\nupdate (CVE-2015-3149).\n","status":"published","published":"2015-07-27T09:53:07Z","modified":"2026-04-16T06:22:37.11636825Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10197-1","title":"java-1_8_0-openjdk-1.8.0.111-1.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:43.579228Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10534-1","title":"java-1_7_0-openjdk-1.7.0.121-1.1 on GA media","description":"These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:17.019339Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2015:1006","title":"Red Hat Security Advisory: java-1.6.0-ibm security update","status":"published","published":"2024-09-22T16:26:46Z","modified":"2026-06-29T10:09:08Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1007","title":"Red Hat Security Advisory: java-1.7.0-ibm security update","status":"published","published":"2024-09-22T16:26:33Z","modified":"2026-06-29T10:09:09Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1020","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-22T16:26:18Z","modified":"2026-06-29T10:09:11Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1021","title":"Red Hat Security Advisory: java-1.5.0-ibm security update","status":"published","published":"2024-09-22T16:26:21Z","modified":"2026-06-29T10:09:11Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1091","title":"Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update","status":"published","published":"2024-09-22T16:26:29Z","modified":"2026-06-29T10:09:20Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0343-1","title":"Security update for IBM Java","description":"\njava-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security \nissues.\n\nThese security issues have been fixed:\n\n    * Unspecified vulnerability (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors (CVE-2014-6456).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6527\n      (CVE-2014-6476).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6476\n      (CVE-2014-6527).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-21T16:40:20Z","modified":"2026-02-04T02:52:14.19977Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0343-2","title":"Security update for IBM Java","description":"\njava-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security \nissues.\n\nThese security issues have been fixed:\n\n    * Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-19T10:21:52Z","modified":"2026-02-04T02:49:56.867631Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0344-1","title":"Security update for IBM Java 7","description":"\nIBM Java 7 SR6 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-19T10:42:44Z","modified":"2026-02-04T02:42:34.105154Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0392-1","title":"Security update for IBM Java 6","description":"\nIBM Java 6 SR15 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-14T23:20:58Z","modified":"2026-02-04T03:24:00.196796Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1073-1","title":"\nSecurity update for java-1_7_0-ibm ","description":"This update fixes the following security issues:\n\n- Version bump to 7.1-3.0 release bnc#930365 CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138\n\n- Fix removeing links before update-alternatives run. bnc#931702\n\n- Fix bnc#912434, javaws/plugin stuff should slave plugin update-alternatives\n- Fix bnc#912447, use system cacerts\n\n- Update to 7.1.2.10 for sec issues bnc#916266 and bnc#916265 CVE-2014-8892 CVE-2014-8891\n","status":"published","published":"2015-06-12T14:22:03Z","modified":"2026-02-04T03:40:51.459387Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-1","title":"Security update for IBM Java 6","description":"\nIBM Java 6 SR15 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-14T23:20:58Z","modified":"2026-02-04T02:21:58.468769Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-2","title":"Security update for IBM Java","description":"\njava-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security \nissues.\n\nThese security issues has been fixed:\n\n    * Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-19T10:21:52Z","modified":"2026-02-04T02:20:15.144947Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-3","title":"Security update for IBM Java 7","description":"\nIBM Java 7 SR6 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-19T10:42:44Z","modified":"2026-02-04T03:44:04.855456Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-4","title":"Security update for IBM Java","description":"\njava-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security \nissues.\n\nThese security issues have been fixed:\n\n    * Unspecified vulnerability (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors (CVE-2014-6456).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6527\n      (CVE-2014-6476).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6476\n      (CVE-2014-6527).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-21T16:40:20Z","modified":"2026-02-04T03:02:01.76993Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1161-1","title":"Security update for java-1_6_0-ibm","description":"\nIBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.\n\nTabulated information can be found on:\n[http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015](http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015)\n\nCVEs addressed:\nCVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138\nCVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469\nCVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477\nCVE-2015-0204 \n\nAdditional bugs fixed:\n\n* Fix javaws/plugin stuff should slave plugin update-alternatives (bnc#912434)\n* Changed Java to use the system root CA certificates (bnc#912447)\n","status":"published","published":"2015-06-17T10:10:25Z","modified":"2026-02-04T03:13:37.755327Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1319-1","title":"Security update for java-1_7_0-openjdk","description":"OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.\n* CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.\n* CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.\n* CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. \n* CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java SE accessible data as well as read access to a subset of Java SE accessible data.\n* CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4736: Difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS).\n* CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.","status":"published","published":"2015-07-23T00:21:00Z","modified":"2026-02-04T03:48:59.699498Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1320-1","title":"Security update for java-1_7_0-openjdk","description":"OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.\n* CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.\n* CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.\n* CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. \n* CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java SE accessible data as well as read access to a subset of Java SE accessible data.\n* CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4736: Difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS).\n* CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.","status":"published","published":"2015-07-22T14:07:08Z","modified":"2026-02-04T02:45:23.923497Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1329-1","title":"Security update for java-1_7_1-ibm","description":"IBM Java was updated to 7.1-3.10 to fix several security issues.\n\nThe following vulnerabilities were fixed:\n  \n* CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.\n* CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.  \n* CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.\n* CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.\n* CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java SE accessible data as well as read access to a subset of Java SE accessible data.\n* CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.  \n* CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS).\n* CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n","status":"published","published":"2015-07-28T11:14:41Z","modified":"2026-02-04T02:14:15.075071Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1331-1","title":"Security update for java-1_7_1-ibm","description":"IBM Java was updated to 7.1-3.10 to fix several security issues.\n\nThe following vulnerabilities were fixed:\n  \n* CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.\n* CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.  \n* CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.\n* CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.\n* CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java SE accessible data as well as read access to a subset of Java SE accessible data.\n* CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.  \n* CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS).\n* CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n","status":"published","published":"2015-07-28T11:22:42Z","modified":"2026-02-04T04:30:09.22307Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1345-1","title":"Security update for java-1_6_0-ibm","description":"IBM Java was updated to 6.0-16.7 to fix several security issues.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.\n* CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.\n* CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.\n* CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS).\n* CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n\nThe following non-security bugs were fixed:\n\n* bsc#936844: misconfigured update-alternative entries\n","status":"published","published":"2015-08-03T12:41:37Z","modified":"2026-02-04T02:14:11.725271Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1375-1","title":"Security update for java-1_7_0-ibm","description":"java-1_7_0-ibm was updated to fix 21 security issues.\n\nThese security issues were fixed:\n- CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment (bsc#938895).\n- CVE-2015-4748: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security (bsc#938895).\n- CVE-2015-2664: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment (bsc#938895).\n- CVE-2015-0192: Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allowed remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine (bsc#938895).\n- CVE-2015-2613: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JCE (bsc#938895).\n- CVE-2015-4731: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX (bsc#938895).\n- CVE-2015-2637: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).\n- CVE-2015-4733: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI (bsc#938895).\n- CVE-2015-4732: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590 (bsc#938895).\n- CVE-2015-2621: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allowed remote attackers to affect confidentiality via vectors related to JMX (bsc#938895).\n- CVE-2015-2619: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).\n- CVE-2015-2590: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732 (bsc#938895).\n- CVE-2015-2638: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).\n- CVE-2015-2625: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JSSE (bsc#938895).\n- CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).\n- CVE-2015-1931: Unspecified vulnerability (bsc#938895).\n- CVE-2015-4760: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).\n- CVE-2015-4000: The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, did not properly convey a DHE_EXPORT choice, which allowed man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the 'Logjam' issue (bsc#935540).\n- CVE-2015-2601: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JCE (bsc#938895).\n- CVE-2015-2808: The RC4 algorithm, as used in the TLS protocol and SSL protocol, did not properly combine state data with key data during the initialization phase, which made it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the 'Bar Mitzvah' issue (bsc#938895).\n- CVE-2015-4749: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect availability via vectors related to JNDI (bsc#938895).\n  ","status":"published","published":"2015-07-31T13:14:30Z","modified":"2026-02-04T03:15:42.336167Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1509-1","title":"Security update for java-1_6_0-ibm","description":"IBM Java was updated to version 6 SR16 FP7 (6.0-16.7) to fix several security issues and bugs.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.\n* CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.\n* CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.\n* CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. (bnc#935540)\n* CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n* CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS).\n* CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.\n\nThe following non-security bugs were fixed:\n\n* bsc#936844: misconfigured update-alternative entries\n* bsc#941939: provide %{name} instead of %{sdklnk} only in _jvmprivdir\n","status":"published","published":"2015-08-21T13:08:25Z","modified":"2026-02-04T02:58:37.093314Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2166-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues: \n\n- Version update to 6.0-16.15 bsc#955131:\n  CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810\n  CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844\n  CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883\n  CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006\n\n  CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469\n  CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477\n  CVE-2015-0204","status":"published","published":"2015-11-26T06:58:50Z","modified":"2026-02-04T03:08:35.245006Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2192-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues: \n\n- Version update to 6.0-16.15 bsc#955131:\n  CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810\n  CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844\n  CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883\n  CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006\n  CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469\n  CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477\n  CVE-2015-0204\n\n- Add backcompat symlinks for sdkdir\n- Fix baselibs.conf policy symlinking\n- Fix bsc#941939 to provide %{name} instead of %{sdklnk} only in\n  _jvmprivdir\n\n","status":"published","published":"2015-12-03T17:59:10Z","modified":"2026-02-04T03:29:59.225019Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2696-1","title":"openjdk-7 vulnerabilities","description":"Several vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure, data integrity, and availability. An attacker\ncould exploit these to cause a denial of service or expose sensitive\ndata over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731,\nCVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748)\n\nSeveral vulnerabilities were discovered in the cryptographic components\nof the OpenJDK JRE. An attacker could exploit these to expose sensitive\ndata over the network. (CVE-2015-2601, CVE-2015-2808, CVE-2015-4000,\nCVE-2015-2625, CVE-2015-2613)\n\nAs a security improvement, this update modifies OpenJDK behavior to\ndisable RC4 TLS/SSL cipher suites by default.\n\nAs a security improvement, this update modifies OpenJDK behavior to\nreject DH key sizes below 768 bits by default, preventing a possible\ndowngrade attack.\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related\nto information disclosure. An attacker could exploit these to expose\nsensitive data over the network. (CVE-2015-2621, CVE-2015-2632)\n\nA vulnerability was discovered with how the JNDI component of the\nOpenJDK JRE handles DNS resolutions. A remote attacker could exploit\nthis to cause a denial of service. (CVE-2015-4749)\n","status":"published","published":"2015-07-30T11:36:10Z","modified":"2026-05-29T18:00:25.564630263Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}