{"id":"CVE-2016-5556","aliases":["BELL-CVE-2016-5556","EUVD-2016-6500","GHSA-h296-rv9c-3fhw","RHSA-2016:2088","RHSA-2016:2089","RHSA-2016:2090","RHSA-2016:2136","RHSA-2016:2137","RHSA-2016:2138","RHSA-2016:2659","RHSA-2017:1216","SUSE-SU-2016:2887-1","SUSE-SU-2016:2953-1","SUSE-SU-2016:3010-1","SUSE-SU-2016:3040-1","SUSE-SU-2016:3041-1","SUSE-SU-2016:3043-1","SUSE-SU-2016:3068-1","SUSE-SU-2016:3078-1","openSUSE-SU-2024:10197-1","openSUSE-SU-2024:10534-1"],"status":"published","title":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to...","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.","severity":{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04885,"percentile":0.92128,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2016-10-25T14:00:00Z","modified":"2026-10-09T10:01:21Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.111-1jpp.4.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.121-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:5","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el6_8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.6.0-sun-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.131-1jpp.1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.3.20-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.60-1jpp.1.el7_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.60-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el5_11"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.35-1jpp.1.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.1-1jpp.1.el6_8"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-17.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-36.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-43.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.35-78.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-19.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-19.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-19.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.60-31.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr9.60-58.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr3.21-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr3.21-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr3.21-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr3.21-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr3.21-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr3.21-20.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-1.1"}]}],"bundled":83},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-1.1"}]}],"bundled":304}],"products":[{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"}],"references":[{"url":"https://security.netapp.com/advisory/ntap-20161019-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2659.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2136.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2137.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2138.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2090.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201611-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/93618","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2089.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securitytracker.com/id/1037040","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2088.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5556","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20161019-0001"},{"url":"https://github.com/advisories/GHSA-h296-rv9c-3fhw"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-5556","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2088","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u111-relnotes-3124969.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1385723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1386408","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2088.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5556","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5573","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5582","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5597","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2089","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_121","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2089.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2090","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_131","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2090.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2136","tags":["advisory"]},{"url":"https://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2136.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2137","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2137.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2138","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2138.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2659","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2659.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328059","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414163","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1216.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0264","tags":["advisory"]},{"url":"http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_April_2016","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0376","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0376","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0686","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0687","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2548661","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1940","tags":["article"]},{"url":"https://sweet32.info/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3426","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3427","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3443","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3449","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3511","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5552","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5552","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3241","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3241","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3253","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3253","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3259","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3261","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3272","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3272","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3272","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3289","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162887-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1005522","tags":["report"]},{"url":"https://bugzilla.suse.com/1005523","tags":["report"]},{"url":"https://bugzilla.suse.com/1005524","tags":["report"]},{"url":"https://bugzilla.suse.com/1005525","tags":["report"]},{"url":"https://bugzilla.suse.com/1005526","tags":["report"]},{"url":"https://bugzilla.suse.com/1005527","tags":["report"]},{"url":"https://bugzilla.suse.com/1005528","tags":["report"]},{"url":"https://bugzilla.suse.com/988651","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5597","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162953-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163010-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1009280","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163040-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163041-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163043-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163068-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/992537","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163078-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8472","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-5556","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.","status":"published","published":"2016-10-25T14:00:00Z","modified":"2024-10-10T18:27:07.816Z","updated_at":"2026-11-02T14:33:30.359814Z"}],"euvd":[{"id":"EUVD-2016-6500","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.","status":"published","published":"2016-10-25T14:00:00Z","modified":"2024-10-10T18:27:07Z","updated_at":"2026-11-03T00:27:40.508744Z"}],"ghsa":[{"id":"GHSA-h296-rv9c-3fhw","title":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to...","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.","status":"published","published":"2022-05-13T01:17:04Z","modified":"2025-04-12T13:06:57Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:01:30.348567Z"}],"nvd":[{"id":"CVE-2016-5556","description":"Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.","status":"published","published":"2016-10-25T14:30:23.397Z","modified":"2026-06-17T00:49:38.343Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:32.086916Z"}],"osv":[{"id":"BELL-CVE-2016-5556","title":"CVE-2016-5556 does not affect BellSoft software","status":"withdrawn","published":"2016-10-25T14:30:00Z","modified":"2026-01-26T09:46:24.122949Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"RHSA-2016:2088","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-15T23:46:03Z","modified":"2026-06-29T10:14:05Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2089","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-15T23:46:08Z","modified":"2026-06-29T10:14:06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2090","title":"Red Hat Security Advisory: java-1.6.0-sun security update","status":"published","published":"2024-09-15T23:46:13Z","modified":"2026-06-29T10:14:07Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2136","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-15T23:46:18Z","modified":"2026-06-29T10:14:19Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2137","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-15T23:46:24Z","modified":"2026-06-29T10:14:19Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2138","title":"Red Hat Security Advisory: java-1.7.0-ibm security update","status":"published","published":"2024-09-15T23:46:29Z","modified":"2026-06-29T10:14:20Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2659","title":"Red Hat Security Advisory: java-1.6.0-ibm security update","status":"published","published":"2024-09-15T23:46:35Z","modified":"2026-06-29T10:14:27Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2017:1216","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-29T17:07:08Z","modified":"2026-10-09T10:01:21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"openSUSE-SU-2024:10197-1","title":"java-1_8_0-openjdk-1.8.0.111-1.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:43.579228Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10534-1","title":"java-1_7_0-openjdk-1.7.0.121-1.1 on GA media","description":"These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:17.019339Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:2887-1","title":"Security update for java-1_8_0-openjdk","description":"\nOpenJDK Java was updated to jdk8u111 (icedtea 3.2.0) to fix the following issues:\n\n* Security fixes\n    + S8146490: Direct indirect CRL checks\n    + S8151921: Improved page resolution\n    + S8155968: Update command line options\n    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)\n    + S8156794: Extend data sharing\n    + S8157176: Improved classfile parsing\n    + S8157739, CVE-2016-5554: Classloader Consistency Checking\n      (bsc#1005523)\n    + S8157749: Improve handling of DNS error replies\n    + S8157753: Audio replay enhancement\n    + S8157759: LCMS Transform Sampling Enhancement\n    + S8157764: Better handling of interpolation plugins\n    + S8158302: Handle contextual glyph substitutions\n    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)\n    + S8159495: Fix index offsets\n    + S8159503: Amend Annotation Actions\n    + S8159511: Stack map validation\n    + S8159515: Improve indy validation\n    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)\n    + S8160090: Better signature handling in pack200\n    + S8160094: Improve pack200 layout\n    + S8160098: Clean up color profiles\n    + S8160591, CVE-2016-5582: Improve internal array handling\n      (bsc#1005527)\n    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)\n    + PR3206, RH1367357: lcms2: Out-of-bounds read in\n      Type_MLU_Read()\n    + CVE-2016-5556 (bsc#1005524)\n* New features\n    + PR1370: Provide option to build without debugging\n    + PR1375: Provide option to strip and link debugging info after\n      build\n    + PR1537: Handle alternative Kerberos credential cache\n      locations\n    + PR1978: Allow use of system PCSC\n    + PR2445: Support system libsctp\n    + PR3182: Support building without pre-compiled headers\n    + PR3183: Support Fedora/RHEL system crypto policy\n    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries\n* Import of OpenJDK 8 u102 build 14\n    + S4515292: ReferenceType.isStatic() returns true for arrays\n    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when\n      processing invokeMethod command\n    + S6976636: JVM/TI test ex03t001 fails assertion\n    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java\n      pid.\n    + S8017462: G1: guarantee fails with\n      UseDynamicNumberOfGCThreads\n    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong\n      object\n    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java\n      fails: Process exit code was 0, but error was expected.\n    + S8041781: Need new regression tests for PBE keys\n    + S8041787: Need new regressions tests for buffer handling for\n      PBE algorithms\n    + S8043836: Need new tests for AES cipher\n    + S8044199: Tests for RSA keys and key specifications\n    + S8044772: TempDirTest.java still times out with -Xcomp\n    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory\n    + S8047031: Add SocketPermission tests for legacy socket types\n    + S8048052: Permission tests for setFactory\n    + S8048138: Tests for JAAS callbacks\n    + S8048147: Privilege tests with JAAS Subject.doAs\n    + S8048356: SecureRandom default provider tests\n    + S8048357: PKCS basic tests\n    + S8048360: Test signed jar files\n    + S8048362: Tests for doPrivileged with accomplice\n    + S8048596: Tests for AEAD ciphers\n    + S8048599: Tests for key wrap and unwrap operations\n    + S8048603: Additional tests for MAC algorithms\n    + S8048604: Tests for strong crypto ciphers\n    + S8048607: Test key generation of DES and DESEDE\n    + S8048610: Implement regression test for bug fix of 4686632\n      in JCE\n    + S8048617: Tests for PKCS12 read operations\n    + S8048618: Tests for PKCS12 write operations.\n    + S8048619: Implement tests for converting PKCS12 keystores\n    + S8048624: Tests for SealedObject\n    + S8048819: Implement reliability test for DH algorithm\n    + S8048820: Implement tests for SecretKeyFactory\n    + S8048830: Implement tests for new functionality provided in\n      JEP 166\n    + S8049237: Need new tests for X509V3 certificates\n    + S8049321: Support SHA256WithDSA in JSSE\n    + S8049429: Tests for java client server communications with\n      various TLS/SSL combinations.\n    + S8049432: New tests for TLS property jdk.tls.client.protocols\n    + S8049814: Additional SASL client-server tests\n    + S8050281: New permission tests for JEP 140\n    + S8050370: Need new regressions tests for messageDigest with\n      DigestIOStream\n    + S8050371: More MessageDigest tests\n    + S8050374: More Signature tests\n    + S8050427: LoginContext tests to cover JDK-4703361\n    + S8050460: JAAS login/logout tests with LoginContext\n    + S8050461: Tests for syntax checking of JAAS configuration\n      file\n    + S8054278: Refactor jps utility tests\n    + S8055530: assert(_exits.control()-\u003eis_top() ||\n      !_gvn.type(ret_phi)-\u003eempty()) failed: return value must be\n      well defined\n    + S8055844: [TESTBUG]\n      test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java\n      fails on Solaris Sparc due to incorrect page size being used\n    + S8059677: Thread.getName() instantiates Strings\n    + S8061464: A typo in CipherTestUtils test\n    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests\n    + S8065076: java/net/SocketPermission/SocketPermissionTest.java\n      fails intermittently\n    + S8065078: NetworkInterface.getNetworkInterfaces() triggers\n      intermittent test failures\n    + S8066871: java.lang.VerifyError: Bad local variable type -\n      local final String\n    + S8068427: Hashtable deserialization reconstitutes table with\n      wrong capacity\n    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs\n      to be updated for JDK-8061210\n    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac\n    + S8071125: Improve exception messages in URLPermission\n    + S8072081: Supplementary characters are rejected in comments\n    + S8072463: Remove requirement that AKID and SKID have to match\n      when building certificate chain\n    + S8072725: Provide more granular levels for GC verification\n    + S8073400: Some Monospaced logical fonts have a different\n      width\n    + S8073872: Schemagen fails with StackOverflowError if element\n      references containing class\n    + S8074931: Additional tests for CertPath API\n    + S8075286: Additional tests for signature algorithm OIDs and\n      transformation string\n    + S8076486: [TESTBUG]\n      javax/security/auth/Subject/doAs/NestedActions.java fails if\n      extra VM options are given\n    + S8076545: Text size is twice bigger under Windows L\u0026F on Win\n      8.1 with HiDPI display\n    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java\n      failed with java.lang.RuntimeException: 'new_active_workers'\n      missing from stdout/stderr\n    + S8079138: Additional negative tests for XML signature\n      processing\n    + S8081512: Remove sun.invoke.anon classes, or move / co-locate\n      them with tests\n    + S8081771: ProcessTool.createJavaProcessBuilder() needs new\n      addTestVmAndJavaOptions argument\n    + S8129419: heapDumper.cpp: assert(length_in_bytes \u003e 0) failed:\n      nothing to copy\n    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic\n    + S8130242: DataFlavorComparator transitivity exception\n    + S8130304: Inference: NodeNotFoundException thrown with deep\n      generic method call chain\n    + S8130425: libjvm crash due to stack overflow in executables\n      with 32k tbss/tdata\n    + S8133023: ParallelGCThreads is not calculated correctly\n    + S8134111: Unmarshaller unmarshalls XML element which doesn't\n      have the expected namespace\n    + S8135259: InetAddress.getAllByName only reports 'unknown\n      error' instead of actual cause\n    + S8136506: Include sun.arch.data.model as a property that can\n      be queried by jtreg\n    + S8137068: Tests added in JDK-8048604 fail to compile\n    + S8139040: Fix initializations before ShouldNotReachHere()\n      etc. and enable -Wuninitialized on linux.\n    + S8139581: AWT components are not drawn after removal and\n      addition to a container\n    + S8141243: Unexpected timezone returned after parsing a date\n    + S8141420: Compiler runtime entries don't hold Klass* from\n      being GCed\n    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can\n      generate unknown signal in hs_err file\n    + S8141551: C2 can not handle returns with inccompatible\n      interface arrays\n    + S8143377: Test PKCS8Test.java fails\n    + S8143647: Javac compiles method reference that allows results\n      in an IllegalAccessError\n    + S8144144: ORB destroy() leaks filedescriptors after\n      unsuccessful connection\n    + S8144593: Suppress not recognized property/feature warning\n      messages from SAXParser\n    + S8144957: Remove PICL warning message\n    + S8145039: JAXB marshaller fails with ClassCastException on\n      classes generated by xjc\n    + S8145228: Java Access Bridge,\n      getAccessibleStatesStringFromContext doesn't wrap the call to\n      getAccessibleRole\n    + S8145388: URLConnection.guessContentTypeFromStream returns\n      image/jpg for some JPEG images\n    + S8145974: XMLStreamWriter produces invalid XML for surrogate\n      pairs on OutputStreamWriter\n    + S8146035: Windows - With LCD antialiasing, some glyphs are\n      not rendered correctly\n    + S8146192: Add test for JDK-8049321\n    + S8146274: Thread spinning on WeakHashMap.getEntry() with\n      concurrent use of nashorn\n    + S8147468: Allow users to bound the size of buffers cached in\n      the per-thread buffer caches\n    + S8147645: get_ctrl_no_update() code is wrong\n    + S8147807: crash in libkcms.so on linux-sparc\n    + S8148379: jdk.nashorn.api.scripting spec. adjustments,\n      clarifications\n    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit\n      platforms\n    + S8148820: Missing @since Javadoc tag in Logger.log(Level,\n      Supplier)\n    + S8148926: Call site profiling fails on braces-wrapped\n      anonymous function\n    + S8149017: Delayed provider selection broken in RSA client key\n      exchange\n    + S8149029: Secure validation of XML based digital signature\n      always enabled when checking wrapping attacks\n    + S8149330: Capacity of StringBuilder should not get close to\n      Integer.MAX_VALUE unless necessary\n    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an\n      array containing two elements\n    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea\n      font on Windows 7,HiDPI, Windows L\u0026F\n    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys\n    + S8149417: Use final restricted flag\n    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer\n      Exception\n    + S8149453: [hidpi] JFileChooser does not scale properly on\n      Windows with HiDPI display and Windows L\u0026F\n    + S8149543: range check CastII nodes should not be split\n      through Phi\n    + S8149743: JVM crash after debugger hotswap with lambdas\n    + S8149744: fix testng.jar delivery in Nashorn build.xml\n    + S8149915: enabling validate-annotations feature for xsd\n      schema with annotation causes NPE\n    + S8150002: Check for the validity of oop before printing it in\n      verify_remembered_set\n    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure\n    + S8150518: G1 GC crashes at\n      G1CollectedHeap::do_collection_pause_at_safepoint(double)\n    + S8150533: Test\n      java/util/logging/LogManagerAppContextDeadlock.java times out\n      intermittently.\n    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when\n      transforming with lots of temporary result trees\n    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue\n      lead to an OutOfMemoryError\n    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails\n      intermittently\n    + S8151197: [TEST_BUG] Need to backport fix for\n      test/javax/net/ssl/TLS/TestJSSE.java\n    + S8151352: jdk/test/sample fails with 'effective library path\n      is outside the test suite'\n    + S8151431: DateFormatSymbols triggers this.clone() in the\n      constructor\n    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java\n      should be modified to run with JTREG 4.1 b13\n    + S8151731: Add new jtreg keywords to jdk 8\n    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':\n      identifier not found\n    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java\n      reported\n    + S8153252: SA: Hotspot build on Windows fails if make/closed\n      folder does not exist\n    + S8153531: Improve exception messaging for RSAClientKeyExchange\n    + S8153641: assert(thread_state == _thread_in_native) failed:\n      Assumed thread_in_native while heap dump\n    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never\n      deleted when processing invokeMethod command\n    + S8154304: NullpointerException at\n      LdapReferralException.getReferralContext\n    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java\n      fails\n    + S8157078: 8u102 L10n resource file updates\n    + S8157838: Personalized Windows Font Size is not taken into\n      account in Java8u102\n* Import of OpenJDK 8 u111 build 14\n    + S6882559: new JEditorPane('text/plain','') fails for null\n      context class loader\n    + S8049171: Additional tests for jarsigner's warnings\n    + S8063086: Math.pow yields different results upon repeated\n      calls\n    + S8140530: Creating a VolatileImage with size 0,0 results in\n      no longer working g2d.drawString\n    + S8142926: OutputAnalyzer's shouldXXX() calls return this\n    + S8147077: IllegalArgumentException thrown by\n      api/java_awt/Component/FlipBufferStrategy/indexTGF_General\n    + S8148127: IllegalArgumentException thrown by JCK test\n      api/java_awt/Component/FlipBufferStrategy/indexTGF_General\n      in opengl pipeline\n    + S8150611: Security problem on sun.misc.resources.Messages*\n    + S8153399: Constrain AppCDS behavior (back port)\n    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp\n    + S8158734: JEditorPane.createEditorKitForContentType throws\n      NPE after 6882559\n    + S8158994: Service Menu services\n    + S8159684: (tz) Support tzdata2016f\n    + S8160904: Typo in code from 8079718 fix :\n      enableCustomValueHanlde\n    + S8160934: isnan() is not available on older MSVC compilers\n    + S8161141: correct bugId for JDK-8158994 fix push\n    + S8162411: Service Menu services 2\n    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh\n      failing after JDK-8155968\n    + S8162511: 8u111 L10n resource file updates\n    + S8162792: Remove constraint DSA keySize \u003c 1024 from\n      jdk.jar.disabledAlgorithms in jdk8\n    + S8164452: 8u111 L10n resource file update - msgdrop 20\n    + S8165816: jarsigner -verify shows jar unsigned if it was\n      signed with a weak algorithm\n    + S8166381: Back out changes to the java.security file to not\n      disable MD5\n* Backports\n    + S8078628, PR3208: Zero build fails with pre-compiled headers\n      disabled\n    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c\n    + S8157306, PR3121: Random infrequent null pointer exceptions\n      in javac (enabled on AArch64 only)\n    + S8162384, PR3122: Performance regression: bimorphic inlining\n      may be bypassed by type speculation\n* Bug fixes\n    + PR3123: Some object files built without -fPIC on x86 only\n    + PR3126: pax-mark-vm script calls 'exit -1' which is invalid\n      in dash\n    + PR3127, G590348: Only apply PaX markings by default on\n      running PaX kernels\n    + PR3199: Invalid nashorn URL\n    + PR3201: Update infinality configure test\n    + PR3218: PR3159 leads to build failure on clean tree\n* AArch64 port\n    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic\n    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in\n      interpreter\n    + S8167421, PR3220: AArch64: in one core system, fatal error:\n      Illegal threadstate encountered\n    + S8167595, PR3220: AArch64: SEGV in stub code\n      cipherBlockChaining_decryptAESCrypt\n    + S8168888, PR3220: Port 8160591: Improve internal array\n      handling to AArch64.\n* Shenandoah\n    + PR3224: Shenandoah broken when building without pre-compiled\n      headers\n- Build against system kerberos \n- Build against system pcsc and sctp \n- S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can\n      lead to the generation of illegal instructions (bsc#988651)","status":"published","published":"2016-11-23T09:28:41Z","modified":"2025-05-02T04:05:25.240081Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2953-1","title":"Security update for java-1_7_0-openjdk","description":"\nThis update for java-1_7_0-openjdk fixes the following issues:\n\n- Update to 2.6.8 - OpenJDK 7u121\n  * Security fixes\n    + S8151921: Improved page resolution\n    + S8155968: Update command line options\n    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)\n    + S8157176: Improved classfile parsing\n    + S8157739, CVE-2016-5554: Classloader Consistency Checking\n      (bsc#1005523)\n    + S8157749: Improve handling of DNS error replies\n    + S8157753: Audio replay enhancement\n    + S8157759: LCMS Transform Sampling Enhancement\n    + S8157764: Better handling of interpolation plugins\n    + S8158302: Handle contextual glyph substitutions\n    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)\n    + S8159495: Fix index offsets\n    + S8159503: Amend Annotation Actions\n    + S8159511: Stack map validation\n    + S8159515: Improve indy validation\n    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)\n    + S8160090: Better signature handling in pack200\n    + S8160094: Improve pack200 layout\n    + S8160098: Clean up color profiles\n    + S8160591, CVE-2016-5582: Improve internal array handling\n      (bsc#1005527)\n    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)\n    + PR3207, RH1367357: lcms2: Out-of-bounds read in\n      Type_MLU_Read()\n    + CVE-2016-5556 (bsc#1005524)\n  * Import of OpenJDK 7 u121 build 0\n    + S6624200: Regression test fails:\n      test/closed/javax/swing/JMenuItem/4654927/bug4654927.java\n    + S6882559: new JEditorPane('text/plain','') fails for null\n      context class loader\n    + S7090158: Networking Libraries don't build with javac -Werror\n    + S7125055: ContentHandler.getContent API changed in error\n    + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on\n      windows\n    + S7187051: ShortRSAKeynnn.sh tests should do cleanup before\n      start test\n    + S8000626: Implement dead key detection for KeyEvent on Linux\n    + S8003890: corelibs test scripts should pass TESTVMOPTS\n    + S8005629: javac warnings compiling\n      java.awt.EventDispatchThread and sun.awt.X11.XIconWindow\n    + S8010297: Missing isLoggable() checks in logging code\n    + S8010782: clean up source files containing carriage return\n      characters\n    + S8014431: cleanup warnings indicated by the -Wunused-value\n      compiler option on linux\n    + S8015265: revise the fix for 8007037\n    + S8016747: Replace deprecated PlatformLogger isLoggable(int)\n      with isLoggable(Level)\n    + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame\n      demo\n    + S8024756: method grouping tabs are not selectable\n    + S8026741: jdk8 l10n resource file translation update 5\n    + S8048147: Privilege tests with JAAS Subject.doAs\n    + S8048357: PKCS basic tests\n    + S8049171: Additional tests for jarsigner's warnings\n    + S8059177: jdk8u40 l10n resource file translation update 1\n    + S8075584: test for 8067364 depends on hardwired text advance\n    + S8076486: [TESTBUG]\n      javax/security/auth/Subject/doAs/NestedActions.java fails if\n      extra VM options are given\n    + S8077953: [TEST_BUG]\n      com/sun/management/OperatingSystemMXBean/TestTotalSwap.java\n      Compilation failed after JDK-8077387\n    + S8080628: No mnemonics on Open and Save buttons in\n      JFileChooser\n    + S8083601: jdk8u60 l10n resource file translation update 2\n    + S8140530: Creating a VolatileImage with size 0,0 results in\n      no longer working g2d.drawString\n    + S8142926: OutputAnalyzer's shouldXXX() calls return this\n    + S8143134: L10n resource file translation update\n    + S8147077: IllegalArgumentException thrown by\n      api/java_awt/Component/FlipBufferStrategy/indexTGF_General\n    + S8148127: IllegalArgumentException thrown by JCK test\n      api/java_awt/Component/FlipBufferStrategy/indexTGF_General in\n      opengl pipeline\n    + S8150611: Security problem on sun.misc.resources.Messages*\n    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp\n    + S8158734: JEditorPane.createEditorKitForContentType throws\n      NPE after 6882559\n    + S8159684: (tz) Support tzdata2016f\n    + S8160934: isnan() is not available on older MSVC compilers\n    + S8162411: Service Menu services 2\n    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh\n      failing after JDK-8155968\n    + S8162511: 8u111 L10n resource file updates\n    + S8162792: Remove constraint DSA keySize \u003c 1024 from\n      jdk.jar.disabledAlgorithms in jdk8\n    + S8164452: 8u111 L10n resource file update - msgdrop 20\n    + S8165816: jarsigner -verify shows jar unsigned if it was\n      signed with a weak algorithm\n    + S8166381: Back out changes to the java.security file to not\n      disable MD5\n  * Backports\n    + S6604109, PR3162: \n      javax.print.PrintServiceLookup.lookupPrintServices fails\n      SOMETIMES for Cups\n    + S6907252, PR3162: ZipFileInputStream Not Thread-Safe\n    + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh\n      failed on 7u45 Embedded linux-ppc*\n    + S8028479, PR3162: runNameEquals still cannot precisely detect\n      if a usable native krb5 is available\n    + S8034057, PR3162: Files.getFileStore and Files.isWritable do\n      not work with SUBST'ed drives (win)\n    + S8038491, PR3162: Improve synchronization in ZipFile.read()\n    + S8038502, PR3162: Deflater.needsInput() should use\n      synchronization\n    + S8059411, PR3162: RowSetWarning does not correctly chain\n      warnings\n    + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column\n      range validation to isdefinitlyWritable\n    + S8066188, PR3162: BaseRowSet returns the wrong default value\n      for escape processing\n    + S8072466, PR3162: Deadlock when initializing MulticastSocket\n      and DatagramSocket\n    + S8075118, PR3162: JVM stuck in infinite loop during\n      verification\n    + S8076579, PR3162: Popping a stack frame after exception\n      breakpoint sets last method param to exception\n    + S8078495, PR3162: End time checking for native TGT is wrong\n    + S8078668, PR3162: jar usage string mentions unsupported\n      option '-n'\n    + S8080115, PR3162: (fs) Crash in libgio when calling\n      Files.probeContentType(path) from parallel threads\n    + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for\n      TimeZone parsing problem\n    + S8129957, PR3162: Deadlock in JNDI LDAP implementation when\n      closing the LDAP context\n    + S8130136, PR3162: Swing window sometimes fails to repaint\n      partially when it becomes exposed\n    + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails\n      when two successive stores in an iteration are determined to\n      be equal\n    + S8132551, PR3162: Initialize local variables before returning\n      them in p11_convert.c\n    + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails\n      after changes for JDK-8080115\n    + S8133666, PR3162: OperatingSystemMXBean reports abnormally\n      high machine CPU consumption on Linux\n    + S8135002, PR3162: Fix or remove broken links in\n      objectMonitor.cpp comments\n    + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate\n    + S8137230, PR3162: TEST_BUG:\n      java/nio/channels/FileChannel/LoopingTruncate.java timed out\n    + S8139373, PR3162: [TEST_BUG]\n      java/net/MulticastSocket/MultiDead.java failed with timeout\n    + S8140249, PR3162: JVM Crashing During startUp If Flight\n      Recording is enabled\n    + S8141491, PR3160, G592292: Unaligned memory access in Bits.c\n    + S8144483, PR3162: One long Safepoint pause directly after\n      each GC log rotation\n    + S8149611, PR3160, G592292: Add tests for\n      Unsafe.copySwapMemory\n  * Bug fixes\n    + S8078628, PR3151: Zero build fails with pre-compiled headers\n      disabled\n    + PR3128: pax-mark-vm script calls 'exit -1' which is invalid\n      in dash\n    + PR3131: PaX marking fails on filesystems which don't support\n      extended attributes\n    + PR3135: Makefile.am rule\n      stamps/add/tzdata-support-debug.stamp has a typo in\n      add-tzdata dependency\n    + PR3141: Pass $(CC) and $(CXX) to OpenJDK build\n    + PR3166: invalid zip timestamp handling leads to error\n      building bootstrap-javac\n    + PR3202: Update infinality configure test\n    + PR3212: Disable ARM32 JIT by default\n  * CACAO\n    + PR3136: CACAO is broken due to 2 new native methods in\n      sun.misc.Unsafe (from S8158260)\n* JamVM\n    + PR3134: JamVM is broken due to 2 new native methods in\n      sun.misc.Unsafe (from S8158260)\n* AArch64 port\n    + S8167200, PR3204: AArch64: Broken stack pointer adjustment\n      in interpreter\n    + S8168888: Port 8160591: Improve internal array handling to\n      AArch64.\n    + PR3211: AArch64 build fails with pre-compiled headers\n      disabled\n- Changed patch:\n  * java-1_7_0-openjdk-gcc6.patch\n    + Rediff to changed context\n\n- Disable arm32 JIT, since its build broken\n  (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942)\n\n","status":"published","published":"2016-11-30T09:44:33Z","modified":"2026-02-04T03:30:38.867925Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3010-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues:\n\n- Version update to 6.0-16.35 (bsc#1009280) fixing the following CVE's:\n  CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554,\n  CVE-2016-5542\n\n","status":"published","published":"2016-12-05T13:22:39Z","modified":"2026-02-04T02:18:07.825002Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3040-1","title":"Security update for java-1_6_0-ibm","description":"\nThis update for java-1_6_0-ibm fixes the following issues:\n\n- Version update to 6.0-16.35 (bsc#1009280) fixing the following CVE's:\n  CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554,\n  CVE-2016-5542\n","status":"published","published":"2016-12-07T13:23:07Z","modified":"2026-02-04T04:29:26.828795Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3041-1","title":"Security update for java-1_7_1-ibm","description":"\nThis update for java-1_7_1-ibm fixes the following issues:\n\n- Version update to 7.1-3.60 (bsc#1009280) fixing the following CVE's:\n  CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554,\n  CVE-2016-5542\n","status":"published","published":"2016-12-07T13:24:58Z","modified":"2026-02-04T02:30:02.675027Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3043-1","title":"Security update for java-1_7_1-ibm","description":"\nThis update for java-1_7_1-ibm fixes the following issues:\n\n- Version update to 7.1-3.60 (bsc#1009280) Fixing the following CVE's:\n  CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554,\n  CVE-2016-5542\n\n","status":"published","published":"2016-12-07T15:46:24Z","modified":"2025-05-02T04:05:25.547773Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3068-1","title":"Security update for java-1_7_0-ibm","description":"\nThis update for java-1_7_0-ibm fixes the following issues:\n\n- Version update to 7.0-9.60 (bsc#1009280, bsc#992537) fixing the following CVE's:\n  CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554,\n  CVE-2016-5542\n\n","status":"published","published":"2016-12-09T13:13:58Z","modified":"2026-02-04T04:32:12.249277Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3078-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- CVE-2016-5568: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity,\n                 and availability via vectors related to AWT \n- CVE-2016-5556: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity,\n                 and availability via vectors related to 2D\n- CVE-2016-5573: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity,\n                 and availability via vectors related to Hotspot\n- CVE-2016-5597: Unspecified vulnerability allowed remote attackers to affect confidentiality via vectors\n                 related to Networking\n- CVE-2016-5554: Unspecified vulnerability allowed remote attackers to affect integrity via vectors related to JMX\n- CVE-2016-5542: Unspecified vulnerability allowed remote attackers to affect integrity via vectors related to Libraries\n","status":"published","published":"2016-12-10T18:19:12Z","modified":"2026-02-04T04:04:20.337414Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}