Security update for IBM Java 7 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1086-3 Final 1 1 2013-11-19T10:42:44Z current 2013-11-19T10:42:44Z 2013-11-19T10:42:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for IBM Java 7 IBM Java 7 SR6 has been released and fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issue references: * CVE-2013-5458 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458> * CVE-2013-5456 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456> * CVE-2013-5457 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457> * CVE-2013-4041 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041> * CVE-2013-5375 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375> * CVE-2013-5372 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372> * CVE-2013-5843 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843> * CVE-2013-5789 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789> * CVE-2013-5830 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830> * CVE-2013-5829 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829> * CVE-2013-5787 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787> * CVE-2013-5788 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788> * CVE-2013-5824 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824> * CVE-2013-5842 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842> * CVE-2013-5782 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782> * CVE-2013-5817 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817> * CVE-2013-5809 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809> * CVE-2013-5814 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814> * CVE-2013-5832 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832> * CVE-2013-5850 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850> * CVE-2013-5838 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838> * CVE-2013-5802 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802> * CVE-2013-5812 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812> * CVE-2013-5804 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804> * CVE-2013-5783 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783> * CVE-2013-3829 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829> * CVE-2013-5823 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823> * CVE-2013-5831 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831> * CVE-2013-5820 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820> * CVE-2013-5819 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819> * CVE-2013-5818 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818> * CVE-2013-5848 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848> * CVE-2013-5776 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776> * CVE-2013-5774 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774> * CVE-2013-5825 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825> * CVE-2013-5840 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840> * CVE-2013-5801 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801> * CVE-2013-5778 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778> * CVE-2013-5851 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851> * CVE-2013-5800 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800> * CVE-2013-5784 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784> * CVE-2013-5849 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849> * CVE-2013-5790 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790> * CVE-2013-5780 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780> * CVE-2013-5797 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797> * CVE-2013-5803 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803> * CVE-2013-5772 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp2-java-1_7_0-ibm Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ Link for SUSE-SU-2015:1086-3 https://lists.suse.com/pipermail/sle-security-updates/2015-June/001458.html E-Mail link for SUSE-SU-2015:1086-3 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/592934 SUSE Bug 592934 https://bugzilla.suse.com/772640 SUSE Bug 772640 https://bugzilla.suse.com/780897 SUSE Bug 780897 https://bugzilla.suse.com/788750 SUSE Bug 788750 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/813939 SUSE Bug 813939 https://bugzilla.suse.com/817062 SUSE Bug 817062 https://bugzilla.suse.com/819285 SUSE Bug 819285 https://bugzilla.suse.com/819288 SUSE Bug 819288 https://bugzilla.suse.com/823034 SUSE Bug 823034 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/862064 SUSE Bug 862064 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/891701 SUSE Bug 891701 https://bugzilla.suse.com/901223 SUSE Bug 901223 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/904889 SUSE Bug 904889 https://bugzilla.suse.com/912434 SUSE Bug 912434 https://bugzilla.suse.com/912447 SUSE Bug 912447 https://bugzilla.suse.com/916265 SUSE Bug 916265 https://bugzilla.suse.com/916266 SUSE Bug 916266 https://bugzilla.suse.com/930365 SUSE Bug 930365 https://bugzilla.suse.com/931702 SUSE Bug 931702 https://www.suse.com/security/cve/CVE-2012-0547/ SUSE CVE CVE-2012-0547 page https://www.suse.com/security/cve/CVE-2012-0551/ SUSE CVE CVE-2012-0551 page https://www.suse.com/security/cve/CVE-2012-1531/ SUSE CVE CVE-2012-1531 page https://www.suse.com/security/cve/CVE-2012-1532/ SUSE CVE CVE-2012-1532 page https://www.suse.com/security/cve/CVE-2012-1533/ SUSE CVE CVE-2012-1533 page https://www.suse.com/security/cve/CVE-2012-1541/ SUSE CVE CVE-2012-1541 page https://www.suse.com/security/cve/CVE-2012-1682/ SUSE CVE CVE-2012-1682 page https://www.suse.com/security/cve/CVE-2012-1713/ SUSE CVE CVE-2012-1713 page https://www.suse.com/security/cve/CVE-2012-1716/ SUSE CVE CVE-2012-1716 page https://www.suse.com/security/cve/CVE-2012-1717/ SUSE CVE CVE-2012-1717 page https://www.suse.com/security/cve/CVE-2012-1718/ SUSE CVE CVE-2012-1718 page https://www.suse.com/security/cve/CVE-2012-1719/ SUSE CVE CVE-2012-1719 page https://www.suse.com/security/cve/CVE-2012-1721/ SUSE CVE CVE-2012-1721 page https://www.suse.com/security/cve/CVE-2012-1722/ SUSE CVE CVE-2012-1722 page https://www.suse.com/security/cve/CVE-2012-1725/ SUSE CVE CVE-2012-1725 page https://www.suse.com/security/cve/CVE-2012-1726/ SUSE CVE CVE-2012-1726 page https://www.suse.com/security/cve/CVE-2012-3136/ SUSE CVE CVE-2012-3136 page https://www.suse.com/security/cve/CVE-2012-3143/ SUSE CVE CVE-2012-3143 page https://www.suse.com/security/cve/CVE-2012-3159/ SUSE CVE CVE-2012-3159 page https://www.suse.com/security/cve/CVE-2012-3174/ SUSE CVE CVE-2012-3174 page https://www.suse.com/security/cve/CVE-2012-3213/ SUSE CVE CVE-2012-3213 page https://www.suse.com/security/cve/CVE-2012-3216/ SUSE CVE CVE-2012-3216 page https://www.suse.com/security/cve/CVE-2012-3342/ SUSE CVE CVE-2012-3342 page https://www.suse.com/security/cve/CVE-2012-4681/ SUSE CVE CVE-2012-4681 page https://www.suse.com/security/cve/CVE-2012-5067/ SUSE CVE CVE-2012-5067 page https://www.suse.com/security/cve/CVE-2012-5069/ SUSE CVE CVE-2012-5069 page https://www.suse.com/security/cve/CVE-2012-5070/ SUSE CVE CVE-2012-5070 page https://www.suse.com/security/cve/CVE-2012-5071/ SUSE CVE CVE-2012-5071 page https://www.suse.com/security/cve/CVE-2012-5072/ SUSE CVE CVE-2012-5072 page https://www.suse.com/security/cve/CVE-2012-5073/ SUSE CVE CVE-2012-5073 page https://www.suse.com/security/cve/CVE-2012-5074/ SUSE CVE CVE-2012-5074 page https://www.suse.com/security/cve/CVE-2012-5075/ SUSE CVE CVE-2012-5075 page https://www.suse.com/security/cve/CVE-2012-5076/ SUSE CVE CVE-2012-5076 page https://www.suse.com/security/cve/CVE-2012-5077/ SUSE CVE CVE-2012-5077 page https://www.suse.com/security/cve/CVE-2012-5079/ SUSE CVE CVE-2012-5079 page https://www.suse.com/security/cve/CVE-2012-5081/ SUSE CVE CVE-2012-5081 page https://www.suse.com/security/cve/CVE-2012-5083/ SUSE CVE CVE-2012-5083 page https://www.suse.com/security/cve/CVE-2012-5084/ SUSE CVE CVE-2012-5084 page https://www.suse.com/security/cve/CVE-2012-5086/ SUSE CVE CVE-2012-5086 page https://www.suse.com/security/cve/CVE-2012-5087/ SUSE CVE CVE-2012-5087 page https://www.suse.com/security/cve/CVE-2012-5088/ SUSE CVE CVE-2012-5088 page https://www.suse.com/security/cve/CVE-2012-5089/ SUSE CVE CVE-2012-5089 page https://www.suse.com/security/cve/CVE-2013-0169/ SUSE CVE CVE-2013-0169 page https://www.suse.com/security/cve/CVE-2013-0351/ SUSE CVE CVE-2013-0351 page https://www.suse.com/security/cve/CVE-2013-0401/ SUSE CVE CVE-2013-0401 page https://www.suse.com/security/cve/CVE-2013-0409/ SUSE CVE CVE-2013-0409 page https://www.suse.com/security/cve/CVE-2013-0419/ SUSE CVE CVE-2013-0419 page https://www.suse.com/security/cve/CVE-2013-0422/ SUSE CVE CVE-2013-0422 page https://www.suse.com/security/cve/CVE-2013-0423/ SUSE CVE CVE-2013-0423 page https://www.suse.com/security/cve/CVE-2013-0424/ SUSE CVE CVE-2013-0424 page https://www.suse.com/security/cve/CVE-2013-0425/ SUSE CVE CVE-2013-0425 page https://www.suse.com/security/cve/CVE-2013-0426/ SUSE CVE CVE-2013-0426 page https://www.suse.com/security/cve/CVE-2013-0427/ SUSE CVE CVE-2013-0427 page https://www.suse.com/security/cve/CVE-2013-0428/ SUSE CVE CVE-2013-0428 page https://www.suse.com/security/cve/CVE-2013-0431/ SUSE CVE CVE-2013-0431 page https://www.suse.com/security/cve/CVE-2013-0432/ SUSE CVE CVE-2013-0432 page https://www.suse.com/security/cve/CVE-2013-0433/ SUSE CVE CVE-2013-0433 page https://www.suse.com/security/cve/CVE-2013-0434/ SUSE CVE CVE-2013-0434 page https://www.suse.com/security/cve/CVE-2013-0435/ SUSE CVE CVE-2013-0435 page https://www.suse.com/security/cve/CVE-2013-0437/ SUSE CVE CVE-2013-0437 page https://www.suse.com/security/cve/CVE-2013-0438/ SUSE CVE CVE-2013-0438 page https://www.suse.com/security/cve/CVE-2013-0440/ SUSE CVE CVE-2013-0440 page https://www.suse.com/security/cve/CVE-2013-0441/ SUSE CVE CVE-2013-0441 page https://www.suse.com/security/cve/CVE-2013-0442/ SUSE CVE CVE-2013-0442 page https://www.suse.com/security/cve/CVE-2013-0443/ SUSE CVE CVE-2013-0443 page https://www.suse.com/security/cve/CVE-2013-0444/ SUSE CVE CVE-2013-0444 page https://www.suse.com/security/cve/CVE-2013-0445/ SUSE CVE CVE-2013-0445 page https://www.suse.com/security/cve/CVE-2013-0446/ SUSE CVE CVE-2013-0446 page https://www.suse.com/security/cve/CVE-2013-0449/ SUSE CVE CVE-2013-0449 page https://www.suse.com/security/cve/CVE-2013-0450/ SUSE CVE CVE-2013-0450 page https://www.suse.com/security/cve/CVE-2013-0485/ SUSE CVE CVE-2013-0485 page https://www.suse.com/security/cve/CVE-2013-0809/ SUSE CVE CVE-2013-0809 page https://www.suse.com/security/cve/CVE-2013-1473/ SUSE CVE CVE-2013-1473 page https://www.suse.com/security/cve/CVE-2013-1476/ SUSE CVE CVE-2013-1476 page https://www.suse.com/security/cve/CVE-2013-1478/ SUSE CVE CVE-2013-1478 page https://www.suse.com/security/cve/CVE-2013-1480/ SUSE CVE CVE-2013-1480 page https://www.suse.com/security/cve/CVE-2013-1484/ SUSE CVE CVE-2013-1484 page https://www.suse.com/security/cve/CVE-2013-1485/ SUSE CVE CVE-2013-1485 page https://www.suse.com/security/cve/CVE-2013-1486/ SUSE CVE CVE-2013-1486 page https://www.suse.com/security/cve/CVE-2013-1487/ SUSE CVE CVE-2013-1487 page https://www.suse.com/security/cve/CVE-2013-1491/ SUSE CVE CVE-2013-1491 page https://www.suse.com/security/cve/CVE-2013-1493/ SUSE CVE CVE-2013-1493 page https://www.suse.com/security/cve/CVE-2013-1500/ SUSE CVE CVE-2013-1500 page https://www.suse.com/security/cve/CVE-2013-1537/ SUSE CVE CVE-2013-1537 page https://www.suse.com/security/cve/CVE-2013-1540/ SUSE CVE CVE-2013-1540 page https://www.suse.com/security/cve/CVE-2013-1557/ SUSE CVE CVE-2013-1557 page https://www.suse.com/security/cve/CVE-2013-1563/ SUSE CVE CVE-2013-1563 page https://www.suse.com/security/cve/CVE-2013-1569/ SUSE CVE CVE-2013-1569 page https://www.suse.com/security/cve/CVE-2013-1571/ SUSE CVE CVE-2013-1571 page https://www.suse.com/security/cve/CVE-2013-2383/ SUSE CVE CVE-2013-2383 page https://www.suse.com/security/cve/CVE-2013-2384/ SUSE CVE CVE-2013-2384 page https://www.suse.com/security/cve/CVE-2013-2394/ SUSE CVE CVE-2013-2394 page https://www.suse.com/security/cve/CVE-2013-2400/ SUSE CVE CVE-2013-2400 page https://www.suse.com/security/cve/CVE-2013-2407/ SUSE CVE CVE-2013-2407 page https://www.suse.com/security/cve/CVE-2013-2412/ SUSE CVE CVE-2013-2412 page https://www.suse.com/security/cve/CVE-2013-2417/ SUSE CVE CVE-2013-2417 page https://www.suse.com/security/cve/CVE-2013-2418/ SUSE CVE CVE-2013-2418 page https://www.suse.com/security/cve/CVE-2013-2419/ SUSE CVE CVE-2013-2419 page https://www.suse.com/security/cve/CVE-2013-2420/ SUSE CVE CVE-2013-2420 page https://www.suse.com/security/cve/CVE-2013-2422/ SUSE CVE CVE-2013-2422 page https://www.suse.com/security/cve/CVE-2013-2424/ SUSE CVE CVE-2013-2424 page https://www.suse.com/security/cve/CVE-2013-2429/ SUSE CVE CVE-2013-2429 page https://www.suse.com/security/cve/CVE-2013-2430/ SUSE CVE CVE-2013-2430 page https://www.suse.com/security/cve/CVE-2013-2432/ SUSE CVE CVE-2013-2432 page https://www.suse.com/security/cve/CVE-2013-2433/ SUSE CVE CVE-2013-2433 page https://www.suse.com/security/cve/CVE-2013-2435/ SUSE CVE CVE-2013-2435 page https://www.suse.com/security/cve/CVE-2013-2437/ SUSE CVE CVE-2013-2437 page https://www.suse.com/security/cve/CVE-2013-2440/ SUSE CVE CVE-2013-2440 page https://www.suse.com/security/cve/CVE-2013-2442/ SUSE CVE CVE-2013-2442 page https://www.suse.com/security/cve/CVE-2013-2443/ SUSE CVE CVE-2013-2443 page https://www.suse.com/security/cve/CVE-2013-2444/ SUSE CVE CVE-2013-2444 page https://www.suse.com/security/cve/CVE-2013-2446/ SUSE CVE CVE-2013-2446 page https://www.suse.com/security/cve/CVE-2013-2447/ SUSE CVE CVE-2013-2447 page https://www.suse.com/security/cve/CVE-2013-2448/ SUSE CVE CVE-2013-2448 page https://www.suse.com/security/cve/CVE-2013-2449/ SUSE CVE CVE-2013-2449 page https://www.suse.com/security/cve/CVE-2013-2450/ SUSE CVE CVE-2013-2450 page https://www.suse.com/security/cve/CVE-2013-2451/ SUSE CVE CVE-2013-2451 page https://www.suse.com/security/cve/CVE-2013-2452/ SUSE CVE CVE-2013-2452 page https://www.suse.com/security/cve/CVE-2013-2453/ SUSE CVE CVE-2013-2453 page https://www.suse.com/security/cve/CVE-2013-2454/ SUSE CVE CVE-2013-2454 page https://www.suse.com/security/cve/CVE-2013-2455/ SUSE CVE CVE-2013-2455 page https://www.suse.com/security/cve/CVE-2013-2456/ SUSE CVE CVE-2013-2456 page https://www.suse.com/security/cve/CVE-2013-2457/ SUSE CVE CVE-2013-2457 page https://www.suse.com/security/cve/CVE-2013-2458/ SUSE CVE CVE-2013-2458 page https://www.suse.com/security/cve/CVE-2013-2459/ SUSE CVE CVE-2013-2459 page https://www.suse.com/security/cve/CVE-2013-2460/ SUSE CVE CVE-2013-2460 page https://www.suse.com/security/cve/CVE-2013-2462/ SUSE CVE CVE-2013-2462 page https://www.suse.com/security/cve/CVE-2013-2463/ SUSE CVE CVE-2013-2463 page https://www.suse.com/security/cve/CVE-2013-2464/ SUSE CVE CVE-2013-2464 page https://www.suse.com/security/cve/CVE-2013-2465/ SUSE CVE CVE-2013-2465 page https://www.suse.com/security/cve/CVE-2013-2466/ SUSE CVE CVE-2013-2466 page https://www.suse.com/security/cve/CVE-2013-2468/ SUSE CVE CVE-2013-2468 page https://www.suse.com/security/cve/CVE-2013-2469/ SUSE CVE CVE-2013-2469 page https://www.suse.com/security/cve/CVE-2013-2470/ SUSE CVE CVE-2013-2470 page https://www.suse.com/security/cve/CVE-2013-2471/ SUSE CVE CVE-2013-2471 page https://www.suse.com/security/cve/CVE-2013-2472/ SUSE CVE CVE-2013-2472 page https://www.suse.com/security/cve/CVE-2013-2473/ SUSE CVE CVE-2013-2473 page https://www.suse.com/security/cve/CVE-2013-3006/ SUSE CVE CVE-2013-3006 page https://www.suse.com/security/cve/CVE-2013-3007/ SUSE CVE CVE-2013-3007 page https://www.suse.com/security/cve/CVE-2013-3008/ SUSE CVE CVE-2013-3008 page https://www.suse.com/security/cve/CVE-2013-3009/ SUSE CVE CVE-2013-3009 page https://www.suse.com/security/cve/CVE-2013-3010/ SUSE CVE CVE-2013-3010 page https://www.suse.com/security/cve/CVE-2013-3011/ SUSE CVE CVE-2013-3011 page https://www.suse.com/security/cve/CVE-2013-3012/ SUSE CVE CVE-2013-3012 page https://www.suse.com/security/cve/CVE-2013-3743/ SUSE CVE CVE-2013-3743 page https://www.suse.com/security/cve/CVE-2013-3744/ SUSE CVE CVE-2013-3744 page https://www.suse.com/security/cve/CVE-2013-3829/ SUSE CVE CVE-2013-3829 page https://www.suse.com/security/cve/CVE-2013-4002/ SUSE CVE CVE-2013-4002 page https://www.suse.com/security/cve/CVE-2013-4041/ SUSE CVE CVE-2013-4041 page https://www.suse.com/security/cve/CVE-2013-5372/ SUSE CVE CVE-2013-5372 page https://www.suse.com/security/cve/CVE-2013-5375/ SUSE CVE CVE-2013-5375 page https://www.suse.com/security/cve/CVE-2013-5456/ SUSE CVE CVE-2013-5456 page https://www.suse.com/security/cve/CVE-2013-5457/ SUSE CVE CVE-2013-5457 page https://www.suse.com/security/cve/CVE-2013-5458/ SUSE CVE CVE-2013-5458 page https://www.suse.com/security/cve/CVE-2013-5772/ SUSE CVE CVE-2013-5772 page https://www.suse.com/security/cve/CVE-2013-5774/ SUSE CVE CVE-2013-5774 page https://www.suse.com/security/cve/CVE-2013-5776/ SUSE CVE CVE-2013-5776 page https://www.suse.com/security/cve/CVE-2013-5778/ SUSE CVE CVE-2013-5778 page https://www.suse.com/security/cve/CVE-2013-5780/ SUSE CVE CVE-2013-5780 page https://www.suse.com/security/cve/CVE-2013-5782/ SUSE CVE CVE-2013-5782 page https://www.suse.com/security/cve/CVE-2013-5783/ SUSE CVE CVE-2013-5783 page https://www.suse.com/security/cve/CVE-2013-5784/ SUSE CVE CVE-2013-5784 page https://www.suse.com/security/cve/CVE-2013-5787/ SUSE CVE CVE-2013-5787 page https://www.suse.com/security/cve/CVE-2013-5788/ SUSE CVE CVE-2013-5788 page https://www.suse.com/security/cve/CVE-2013-5789/ SUSE CVE CVE-2013-5789 page https://www.suse.com/security/cve/CVE-2013-5790/ SUSE CVE CVE-2013-5790 page https://www.suse.com/security/cve/CVE-2013-5797/ SUSE CVE CVE-2013-5797 page https://www.suse.com/security/cve/CVE-2013-5800/ SUSE CVE CVE-2013-5800 page https://www.suse.com/security/cve/CVE-2013-5801/ SUSE CVE CVE-2013-5801 page https://www.suse.com/security/cve/CVE-2013-5802/ SUSE CVE CVE-2013-5802 page https://www.suse.com/security/cve/CVE-2013-5803/ SUSE CVE CVE-2013-5803 page https://www.suse.com/security/cve/CVE-2013-5804/ SUSE CVE CVE-2013-5804 page https://www.suse.com/security/cve/CVE-2013-5809/ SUSE CVE CVE-2013-5809 page https://www.suse.com/security/cve/CVE-2013-5812/ SUSE CVE CVE-2013-5812 page https://www.suse.com/security/cve/CVE-2013-5814/ SUSE CVE CVE-2013-5814 page https://www.suse.com/security/cve/CVE-2013-5817/ SUSE CVE CVE-2013-5817 page https://www.suse.com/security/cve/CVE-2013-5818/ SUSE CVE CVE-2013-5818 page https://www.suse.com/security/cve/CVE-2013-5819/ SUSE CVE CVE-2013-5819 page https://www.suse.com/security/cve/CVE-2013-5820/ SUSE CVE CVE-2013-5820 page https://www.suse.com/security/cve/CVE-2013-5823/ SUSE CVE CVE-2013-5823 page https://www.suse.com/security/cve/CVE-2013-5824/ SUSE CVE CVE-2013-5824 page https://www.suse.com/security/cve/CVE-2013-5825/ SUSE CVE CVE-2013-5825 page https://www.suse.com/security/cve/CVE-2013-5829/ SUSE CVE CVE-2013-5829 page https://www.suse.com/security/cve/CVE-2013-5830/ SUSE CVE CVE-2013-5830 page https://www.suse.com/security/cve/CVE-2013-5831/ SUSE CVE CVE-2013-5831 page https://www.suse.com/security/cve/CVE-2013-5832/ SUSE CVE CVE-2013-5832 page https://www.suse.com/security/cve/CVE-2013-5838/ SUSE CVE CVE-2013-5838 page https://www.suse.com/security/cve/CVE-2013-5840/ SUSE CVE CVE-2013-5840 page https://www.suse.com/security/cve/CVE-2013-5842/ SUSE CVE CVE-2013-5842 page https://www.suse.com/security/cve/CVE-2013-5843/ SUSE CVE CVE-2013-5843 page https://www.suse.com/security/cve/CVE-2013-5848/ SUSE CVE CVE-2013-5848 page https://www.suse.com/security/cve/CVE-2013-5849/ SUSE CVE CVE-2013-5849 page https://www.suse.com/security/cve/CVE-2013-5850/ SUSE CVE CVE-2013-5850 page https://www.suse.com/security/cve/CVE-2013-5851/ SUSE CVE CVE-2013-5851 page https://www.suse.com/security/cve/CVE-2013-5878/ SUSE CVE CVE-2013-5878 page https://www.suse.com/security/cve/CVE-2013-5884/ SUSE CVE CVE-2013-5884 page https://www.suse.com/security/cve/CVE-2013-5887/ SUSE CVE CVE-2013-5887 page https://www.suse.com/security/cve/CVE-2013-5888/ SUSE CVE CVE-2013-5888 page https://www.suse.com/security/cve/CVE-2013-5889/ SUSE CVE CVE-2013-5889 page https://www.suse.com/security/cve/CVE-2013-5896/ SUSE CVE CVE-2013-5896 page https://www.suse.com/security/cve/CVE-2013-5898/ SUSE CVE CVE-2013-5898 page https://www.suse.com/security/cve/CVE-2013-5899/ SUSE CVE CVE-2013-5899 page https://www.suse.com/security/cve/CVE-2013-5907/ SUSE CVE CVE-2013-5907 page https://www.suse.com/security/cve/CVE-2013-5910/ SUSE CVE CVE-2013-5910 page https://www.suse.com/security/cve/CVE-2013-6629/ SUSE CVE CVE-2013-6629 page https://www.suse.com/security/cve/CVE-2013-6954/ SUSE CVE CVE-2013-6954 page https://www.suse.com/security/cve/CVE-2014-0368/ SUSE CVE CVE-2014-0368 page https://www.suse.com/security/cve/CVE-2014-0373/ SUSE CVE CVE-2014-0373 page https://www.suse.com/security/cve/CVE-2014-0375/ SUSE CVE CVE-2014-0375 page https://www.suse.com/security/cve/CVE-2014-0376/ SUSE CVE CVE-2014-0376 page https://www.suse.com/security/cve/CVE-2014-0387/ SUSE CVE CVE-2014-0387 page https://www.suse.com/security/cve/CVE-2014-0403/ SUSE CVE CVE-2014-0403 page https://www.suse.com/security/cve/CVE-2014-0410/ SUSE CVE CVE-2014-0410 page https://www.suse.com/security/cve/CVE-2014-0411/ SUSE CVE CVE-2014-0411 page https://www.suse.com/security/cve/CVE-2014-0415/ SUSE CVE CVE-2014-0415 page https://www.suse.com/security/cve/CVE-2014-0416/ SUSE CVE CVE-2014-0416 page https://www.suse.com/security/cve/CVE-2014-0417/ SUSE CVE CVE-2014-0417 page https://www.suse.com/security/cve/CVE-2014-0422/ SUSE CVE CVE-2014-0422 page https://www.suse.com/security/cve/CVE-2014-0423/ SUSE CVE CVE-2014-0423 page https://www.suse.com/security/cve/CVE-2014-0424/ SUSE CVE CVE-2014-0424 page https://www.suse.com/security/cve/CVE-2014-0428/ SUSE CVE CVE-2014-0428 page https://www.suse.com/security/cve/CVE-2014-0429/ SUSE CVE CVE-2014-0429 page https://www.suse.com/security/cve/CVE-2014-0446/ SUSE CVE CVE-2014-0446 page https://www.suse.com/security/cve/CVE-2014-0448/ SUSE CVE CVE-2014-0448 page https://www.suse.com/security/cve/CVE-2014-0449/ SUSE CVE CVE-2014-0449 page https://www.suse.com/security/cve/CVE-2014-0451/ SUSE CVE CVE-2014-0451 page https://www.suse.com/security/cve/CVE-2014-0452/ SUSE CVE CVE-2014-0452 page https://www.suse.com/security/cve/CVE-2014-0453/ SUSE CVE CVE-2014-0453 page https://www.suse.com/security/cve/CVE-2014-0454/ SUSE CVE CVE-2014-0454 page https://www.suse.com/security/cve/CVE-2014-0455/ SUSE CVE CVE-2014-0455 page https://www.suse.com/security/cve/CVE-2014-0457/ SUSE CVE CVE-2014-0457 page https://www.suse.com/security/cve/CVE-2014-0458/ SUSE CVE CVE-2014-0458 page https://www.suse.com/security/cve/CVE-2014-0459/ SUSE CVE CVE-2014-0459 page https://www.suse.com/security/cve/CVE-2014-0460/ SUSE CVE CVE-2014-0460 page https://www.suse.com/security/cve/CVE-2014-0461/ SUSE CVE CVE-2014-0461 page https://www.suse.com/security/cve/CVE-2014-0878/ SUSE CVE CVE-2014-0878 page https://www.suse.com/security/cve/CVE-2014-1876/ SUSE CVE CVE-2014-1876 page https://www.suse.com/security/cve/CVE-2014-2398/ SUSE CVE CVE-2014-2398 page https://www.suse.com/security/cve/CVE-2014-2401/ SUSE CVE CVE-2014-2401 page https://www.suse.com/security/cve/CVE-2014-2402/ SUSE CVE CVE-2014-2402 page https://www.suse.com/security/cve/CVE-2014-2409/ SUSE CVE CVE-2014-2409 page https://www.suse.com/security/cve/CVE-2014-2412/ SUSE CVE CVE-2014-2412 page https://www.suse.com/security/cve/CVE-2014-2414/ SUSE CVE CVE-2014-2414 page https://www.suse.com/security/cve/CVE-2014-2420/ SUSE CVE CVE-2014-2420 page https://www.suse.com/security/cve/CVE-2014-2421/ SUSE CVE CVE-2014-2421 page https://www.suse.com/security/cve/CVE-2014-2423/ SUSE CVE CVE-2014-2423 page https://www.suse.com/security/cve/CVE-2014-2427/ SUSE CVE CVE-2014-2427 page https://www.suse.com/security/cve/CVE-2014-2428/ SUSE CVE CVE-2014-2428 page https://www.suse.com/security/cve/CVE-2014-8891/ SUSE CVE CVE-2014-8891 page https://www.suse.com/security/cve/CVE-2014-8892/ SUSE CVE CVE-2014-8892 page https://www.suse.com/security/cve/CVE-2015-0138/ SUSE CVE CVE-2015-0138 page https://www.suse.com/security/cve/CVE-2015-0192/ SUSE CVE CVE-2015-0192 page https://www.suse.com/security/cve/CVE-2015-0204/ SUSE CVE CVE-2015-0204 page https://www.suse.com/security/cve/CVE-2015-0458/ SUSE CVE CVE-2015-0458 page https://www.suse.com/security/cve/CVE-2015-0459/ SUSE CVE CVE-2015-0459 page https://www.suse.com/security/cve/CVE-2015-0469/ SUSE CVE CVE-2015-0469 page https://www.suse.com/security/cve/CVE-2015-0477/ SUSE CVE CVE-2015-0477 page https://www.suse.com/security/cve/CVE-2015-0478/ SUSE CVE CVE-2015-0478 page https://www.suse.com/security/cve/CVE-2015-0480/ SUSE CVE CVE-2015-0480 page https://www.suse.com/security/cve/CVE-2015-0488/ SUSE CVE CVE-2015-0488 page https://www.suse.com/security/cve/CVE-2015-0491/ SUSE CVE CVE-2015-0491 page https://www.suse.com/security/cve/CVE-2015-1914/ SUSE CVE CVE-2015-1914 page https://www.suse.com/security/cve/CVE-2015-2808/ SUSE CVE CVE-2015-2808 page SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP2 java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references." CVE-2012-0547 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 0 AV:N/AC:L/Au:N/C:N/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-0547.html CVE-2012-0547 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment. CVE-2012-0551 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-0551.html CVE-2012-0551 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2012-1531 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1531.html CVE-2012-1531 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2012-1532 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1532.html CVE-2012-1532 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159. CVE-2012-1533 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1533.html CVE-2012-1533 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free. CVE-2012-1541 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1541.html CVE-2012-1541 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/806786 SUSE Bug 806786 https://bugzilla.suse.com/818972 SUSE Bug 818972 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder." CVE-2012-1682 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1682.html CVE-2012-1682 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/780897 SUSE Bug 780897 https://bugzilla.suse.com/785433 SUSE Bug 785433 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2012-1713 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1713.html CVE-2012-1713 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing. CVE-2012-1716 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1716.html CVE-2012-1716 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux. CVE-2012-1717 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1717.html CVE-2012-1717 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security. CVE-2012-1718 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1718.html CVE-2012-1718 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA. CVE-2012-1719 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1719.html CVE-2012-1719 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722. CVE-2012-1721 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1721.html CVE-2012-1721 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721. CVE-2012-1722 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1722.html CVE-2012-1722 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2012-1725 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1725.html CVE-2012-1725 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. CVE-2012-1726 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-1726.html CVE-2012-1726 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682. CVE-2012-3136 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3136.html CVE-2012-3136 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-5089. CVE-2012-3143 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3143.html CVE-2012-3143 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1533. CVE-2012-3159 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3159.html CVE-2012-3159 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114. CVE-2012-3174 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3174.html CVE-2012-3174 https://bugzilla.suse.com/798324 SUSE Bug 798324 https://bugzilla.suse.com/798521 SUSE Bug 798521 https://bugzilla.suse.com/798535 SUSE Bug 798535 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting. CVE-2012-3213 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3213.html CVE-2012-3213 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2012-3216 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3216.html CVE-2012-3216 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. CVE-2012-3342 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-3342.html CVE-2012-3342 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. CVE-2012-4681 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-4681.html CVE-2012-4681 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/798324 SUSE Bug 798324 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment. CVE-2012-5067 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5067.html CVE-2012-5067 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency. CVE-2012-5069 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5069.html CVE-2012-5069 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX. CVE-2012-5070 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5070.html CVE-2012-5070 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX. CVE-2012-5071 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5071.html CVE-2012-5071 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security. CVE-2012-5072 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5072.html CVE-2012-5072 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5079. CVE-2012-5073 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5073.html CVE-2012-5073 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS. CVE-2012-5074 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5074.html CVE-2012-5074 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX. CVE-2012-5075 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5075.html CVE-2012-5075 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS. CVE-2012-5076 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5076.html CVE-2012-5076 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Security. CVE-2012-5077 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5077.html CVE-2012-5077 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5073. CVE-2012-5079 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5079.html CVE-2012-5079 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE. CVE-2012-5081 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5081.html CVE-2012-5081 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2012-5083 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5083.html CVE-2012-5083 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing. CVE-2012-5084 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5084.html CVE-2012-5084 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. CVE-2012-5086 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5086.html CVE-2012-5086 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. CVE-2012-5087 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5087.html CVE-2012-5087 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2012-5088 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5088.html CVE-2012-5088 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-3143. CVE-2012-5089 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2012-5089.html CVE-2012-5089 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. CVE-2013-0169 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0169.html CVE-2013-0169 https://bugzilla.suse.com/1070148 SUSE Bug 1070148 https://bugzilla.suse.com/1103036 SUSE Bug 1103036 https://bugzilla.suse.com/1103597 SUSE Bug 1103597 https://bugzilla.suse.com/802184 SUSE Bug 802184 https://bugzilla.suse.com/802648 SUSE Bug 802648 https://bugzilla.suse.com/802746 SUSE Bug 802746 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/804654 SUSE Bug 804654 https://bugzilla.suse.com/809839 SUSE Bug 809839 https://bugzilla.suse.com/813366 SUSE Bug 813366 https://bugzilla.suse.com/813939 SUSE Bug 813939 https://bugzilla.suse.com/821818 SUSE Bug 821818 https://bugzilla.suse.com/905106 SUSE Bug 905106 https://bugzilla.suse.com/977584 SUSE Bug 977584 https://bugzilla.suse.com/977616 SUSE Bug 977616 https://bugzilla.suse.com/984977 SUSE Bug 984977 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. CVE-2013-0351 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0351.html CVE-2013-0351 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions. CVE-2013-0401 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0401.html CVE-2013-0401 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX. CVE-2013-0409 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0409.html CVE-2013-0409 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. CVE-2013-0419 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0419.html CVE-2013-0419 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue. CVE-2013-0422 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0422.html CVE-2013-0422 https://bugzilla.suse.com/798324 SUSE Bug 798324 https://bugzilla.suse.com/798521 SUSE Bug 798521 https://bugzilla.suse.com/798535 SUSE Bug 798535 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. CVE-2013-0423 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0423.html CVE-2013-0423 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number. CVE-2013-0424 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0424.html CVE-2013-0424 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0428 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions. CVE-2013-0425 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0425.html CVE-2013-0425 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions. CVE-2013-0426 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0426.html CVE-2013-0426 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted. CVE-2013-0427 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0427.html CVE-2013-0427 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect checks for proxy classes" in the Reflection API. CVE-2013-0428 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0428.html CVE-2013-0428 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490. CVE-2013-0431 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0431.html CVE-2013-0431 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient clipboard access premission checks." CVE-2013-0432 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0432.html CVE-2013-0432 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddress data. CVE-2013-0433 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0433.html CVE-2013-0433 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information. CVE-2013-0434 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0434.html CVE-2013-0434 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and "Better handling of UI elements." CVE-2013-0435 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0435.html CVE-2013-0435 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2013-0437 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0437.html CVE-2013-0437 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Deployment. CVE-2013-0438 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0438.html CVE-2013-0438 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect availability via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to CPU consumption in the SSL/TLS implementation via a large number of ClientHello packets that are not properly handled by (1) ClientHandshaker.java and (2) ServerHandshaker.java. CVE-2013-0440 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0440.html CVE-2013-0440 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-1476 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via certain methods that should not be serialized, aka "missing serialization restriction." CVE-2013-0441 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0441.html CVE-2013-0441 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of "privileges of the code" that bypasses the sandbox. CVE-2013-0442 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0442.html CVE-2013-0442 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect validation of Diffie-Hellman keys, which allows remote attackers to conduct a "small subgroup attack" to force the use of weak session keys or obtain sensitive information about the private key. CVE-2013-0443 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4 AV:N/AC:H/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0443.html CVE-2013-0443 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient checks for cached results" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code. CVE-2013-0444 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0444.html CVE-2013-0444 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of "privileges of the code" that bypasses the sandbox. CVE-2013-0445 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0445.html CVE-2013-0445 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. CVE-2013-0446 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0446.html CVE-2013-0446 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deployment. CVE-2013-0449 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0449.html CVE-2013-0449 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of "access control context" in the JMX RequiredModelMBean class. CVE-2013-0450 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0450.html CVE-2013-0450 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries. CVE-2013-0485 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0485.html CVE-2013-0485 https://bugzilla.suse.com/813939 SUSE Bug 813939 Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493. CVE-2013-0809 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-0809.html CVE-2013-0809 https://bugzilla.suse.com/806786 SUSE Bug 806786 https://bugzilla.suse.com/807487 SUSE Bug 807487 https://bugzilla.suse.com/809386 SUSE Bug 809386 https://bugzilla.suse.com/813939 SUSE Bug 813939 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deployment. CVE-2013-1473 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1473.html CVE-2013-1473 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors." CVE-2013-1476 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1476.html CVE-2013-1476 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" that can trigger an integer overflow and memory corruption. CVE-2013-1478 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1478.html CVE-2013-1478 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption. CVE-2013-1480 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1480.html CVE-2013-1480 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2013-1484 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1484.html CVE-2013-1484 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2013-1485 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1485.html CVE-2013-1485 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. CVE-2013-1486 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1486.html CVE-2013-1486 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/804654 SUSE Bug 804654 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2013-1487 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1487.html CVE-2013-1487 https://bugzilla.suse.com/798535 SUSE Bug 798535 The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013. CVE-2013-1491 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1491.html CVE-2013-1491 https://bugzilla.suse.com/819288 SUSE Bug 819288 The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013. CVE-2013-1493 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1493.html CVE-2013-1493 https://bugzilla.suse.com/806786 SUSE Bug 806786 https://bugzilla.suse.com/807487 SUSE Bug 807487 https://bugzilla.suse.com/809386 SUSE Bug 809386 https://bugzilla.suse.com/813939 SUSE Bug 813939 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory. CVE-2013-1500 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 8.3 AV:N/AC:M/Au:N/C:P/I:C/A:P 3.6 AV:L/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1500.html CVE-2013-1500 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code. CVE-2013-1537 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1537.html CVE-2013-1537 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433. CVE-2013-1540 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1540.html CVE-2013-1540 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method. CVE-2013-1557 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1557.html CVE-2013-1557 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install. CVE-2013-1563 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1563.html CVE-2013-1563 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-1569 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1569.html CVE-2013-1569 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc. CVE-2013-1571 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-1571.html CVE-2013-1571 https://bugzilla.suse.com/824397 SUSE Bug 824397 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-2383 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2383.html CVE-2013-2383 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-2384 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2384.html CVE-2013-2384 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491. CVE-2013-2394 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2394.html CVE-2013-2394 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744. CVE-2013-2400 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2400.html CVE-2013-2400 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader." CVE-2013-2407 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2407.html CVE-2013-2407 https://bugzilla.suse.com/824397 SUSE Bug 824397 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box. CVE-2013-2412 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2412.html CVE-2013-2412 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue. CVE-2013-2417 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2417.html CVE-2013-2417 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2013-2418 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2418.html CVE-2013-2418 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-2419 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2419.html CVE-2013-2419 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets. CVE-2013-2420 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2420.html CVE-2013-2420 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox. CVE-2013-2422 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2422.html CVE-2013-2422 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator. CVE-2013-2424 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2424.html CVE-2013-2424 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption. CVE-2013-2429 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2429.html CVE-2013-2429 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code. CVE-2013-2430 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2430.html CVE-2013-2430 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491. CVE-2013-2432 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2432.html CVE-2013-2432 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540. CVE-2013-2433 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2433.html CVE-2013-2433 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440. CVE-2013-2435 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2435.html CVE-2013-2435 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment. CVE-2013-2437 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2437.html CVE-2013-2437 https://bugzilla.suse.com/824397 SUSE Bug 824397 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435. CVE-2013-2440 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2440.html CVE-2013-2440 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468. CVE-2013-2442 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2442.html CVE-2013-2442 https://bugzilla.suse.com/824397 SUSE Bug 824397 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class. CVE-2013-2443 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2443.html CVE-2013-2443 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files. CVE-2013-2444 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2444.html CVE-2013-2444 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams. CVE-2013-2446 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2446.html CVE-2013-2446 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost. CVE-2013-2447 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2447.html CVE-2013-2447 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes." CVE-2013-2448 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2448.html CVE-2013-2448 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path. CVE-2013-2449 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2449.html CVE-2013-2449 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass. CVE-2013-2450 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2450.html CVE-2013-2450 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use. CVE-2013-2451 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2451.html CVE-2013-2451 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class. CVE-2013-2452 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2452.html CVE-2013-2452 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector. CVE-2013-2453 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2453.html CVE-2013-2453 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox. CVE-2013-2454 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2454.html CVE-2013-2454 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods. CVE-2013-2455 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2455.html CVE-2013-2455 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class. CVE-2013-2456 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2456.html CVE-2013-2456 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions. CVE-2013-2457 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2457.html CVE-2013-2457 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles." CVE-2013-2458 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2458.html CVE-2013-2458 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks." CVE-2013-2459 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2459.html CVE-2013-2459 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "insufficient access checks" in the tracing component. CVE-2013-2460 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2460.html CVE-2013-2460 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2013-2462 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2462.html CVE-2013-2462 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D. CVE-2013-2463 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2463.html CVE-2013-2463 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473. CVE-2013-2464 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2464.html CVE-2013-2464 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D. CVE-2013-2465 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2465.html CVE-2013-2465 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468. CVE-2013-2466 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2466.html CVE-2013-2466 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466. CVE-2013-2468 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2468.html CVE-2013-2468 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D. CVE-2013-2469 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2469.html CVE-2013-2469 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing." CVE-2013-2470 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2470.html CVE-2013-2470 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks." CVE-2013-2471 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2471.html CVE-2013-2471 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D. CVE-2013-2472 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2472.html CVE-2013-2472 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D. CVE-2013-2473 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-2473.html CVE-2013-2473 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008. CVE-2013-3006 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3006.html CVE-2013-3006 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006. CVE-2013-3007 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3007.html CVE-2013-3007 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006. CVE-2013-3008 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3008.html CVE-2013-3008 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block. CVE-2013-3009 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3009.html CVE-2013-3009 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3007. CVE-2013-3010 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3010.html CVE-2013-3010 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012. CVE-2013-3011 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3011.html CVE-2013-3011 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3011. CVE-2013-3012 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3012.html CVE-2013-3012 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. CVE-2013-3743 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3743.html CVE-2013-3743 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400. CVE-2013-3744 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3744.html CVE-2013-3744 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. CVE-2013-3829 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-3829.html CVE-2013-3829 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names. CVE-2013-4002 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-4002.html CVE-2013-4002 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 https://bugzilla.suse.com/977650 SUSE Bug 977650 Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors. CVE-2013-4041 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-4041.html CVE-2013-4041 https://bugzilla.suse.com/849212 SUSE Bug 849212 The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities. CVE-2013-5372 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5372.html CVE-2013-5372 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL. CVE-2013-5375 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5375.html CVE-2013-5375 https://bugzilla.suse.com/849212 SUSE Bug 849212 The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block. CVE-2013-5456 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5456.html CVE-2013-5456 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/977646 SUSE Bug 977646 https://bugzilla.suse.com/981057 SUSE Bug 981057 https://bugzilla.suse.com/981060 SUSE Bug 981060 https://bugzilla.suse.com/981087 SUSE Bug 981087 Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors. CVE-2013-5457 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5457.html CVE-2013-5457 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors. CVE-2013-5458 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5458.html CVE-2013-5458 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat. CVE-2013-5772 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5772.html CVE-2013-5772 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2013-5774 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5774.html CVE-2013-5774 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment. CVE-2013-5776 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5776.html CVE-2013-5776 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2013-5778 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5778.html CVE-2013-5778 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2013-5780 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5780.html CVE-2013-5780 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2013-5782 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5782.html CVE-2013-5782 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing. CVE-2013-5783 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5783.html CVE-2013-5783 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING. CVE-2013-5784 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5784.html CVE-2013-5784 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852. CVE-2013-5787 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5787.html CVE-2013-5787 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2013-5788 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5788.html CVE-2013-5788 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852. CVE-2013-5789 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5789.html CVE-2013-5789 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS. CVE-2013-5790 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5790.html CVE-2013-5790 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc. CVE-2013-5797 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5797.html CVE-2013-5797 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS. CVE-2013-5800 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5800.html CVE-2013-5800 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2013-5801 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5801.html CVE-2013-5801 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. CVE-2013-5802 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5802.html CVE-2013-5802 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS. CVE-2013-5803 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5803.html CVE-2013-5803 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc. CVE-2013-5804 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5804.html CVE-2013-5804 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829. CVE-2013-5809 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5809.html CVE-2013-5809 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment. CVE-2013-5812 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5812.html CVE-2013-5812 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. CVE-2013-5814 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5814.html CVE-2013-5814 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. CVE-2013-5817 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5817.html CVE-2013-5817 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5819 and CVE-2013-5831. CVE-2013-5818 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5818.html CVE-2013-5818 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831. CVE-2013-5819 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5819.html CVE-2013-5819 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS. CVE-2013-5820 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5820.html CVE-2013-5820 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security. CVE-2013-5823 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5823.html CVE-2013-5823 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5832, and CVE-2013-5852. CVE-2013-5824 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5824.html CVE-2013-5824 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP. CVE-2013-5825 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5825.html CVE-2013-5825 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809. CVE-2013-5829 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5829.html CVE-2013-5829 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2013-5830 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5830.html CVE-2013-5830 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5819. CVE-2013-5831 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5831.html CVE-2013-5831 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5852. CVE-2013-5832 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5832.html CVE-2013-5832 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2013-5838 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5838.html CVE-2013-5838 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/972468 SUSE Bug 972468 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2013-5840 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5840.html CVE-2013-5840 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850. CVE-2013-5842 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5842.html CVE-2013-5842 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2013-5843 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5843.html CVE-2013-5843 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment. CVE-2013-5848 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5848.html CVE-2013-5848 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT. CVE-2013-5849 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5849.html CVE-2013-5849 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842. CVE-2013-5850 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5850.html CVE-2013-5850 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP. CVE-2013-5851 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5851.html CVE-2013-5851 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox. CVE-2013-5878 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5878.html CVE-2013-5878 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories. CVE-2013-5884 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5884.html CVE-2013-5884 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment. CVE-2013-5887 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5887.html CVE-2013-5887 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2013-5888 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5888.html CVE-2013-5888 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424. CVE-2013-5889 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5889.html CVE-2013-5889 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list. CVE-2013-5896 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5896.html CVE-2013-5896 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-0375 and CVE-2014-0403. CVE-2013-5898 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 4 AV:N/AC:H/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5898.html CVE-2013-5898 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment. CVE-2013-5899 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5899.html CVE-2013-5899 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file. CVE-2013-5907 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5907.html CVE-2013-5907 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays. CVE-2013-5910 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-5910.html CVE-2013-5910 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image. CVE-2013-6629 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-6629.html CVE-2013-6629 https://bugzilla.suse.com/850430 SUSE Bug 850430 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 https://bugzilla.suse.com/880246 SUSE Bug 880246 The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c. CVE-2013-6954 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2013-6954.html CVE-2013-6954 https://bugzilla.suse.com/856522 SUSE Bug 856522 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox. CVE-2014-0368 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0368.html CVE-2014-0368 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox. CVE-2014-0373 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0373.html CVE-2014-0373 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403. CVE-2014-0375 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0375.html CVE-2014-0375 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories." CVE-2014-0376 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0376.html CVE-2014-0376 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2014-0387 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0387.html CVE-2014-0387 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375. CVE-2014-0403 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0403.html CVE-2014-0403 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424. CVE-2014-0410 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0410.html CVE-2014-0410 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake. CVE-2014-0411 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 4 AV:N/AC:H/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0411.html CVE-2014-0411 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424. CVE-2014-0415 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0415.html CVE-2014-0415 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance. CVE-2014-0416 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0416.html CVE-2014-0416 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2014-0417 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0417.html CVE-2014-0417 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox. CVE-2014-0422 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0422.html CVE-2014-0422 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding. CVE-2014-0423 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.5 AV:N/AC:L/Au:S/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0423.html CVE-2014-0423 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418. CVE-2014-0424 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0424.html CVE-2014-0424 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox. CVE-2014-0428 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0428.html CVE-2014-0428 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2014-0429 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0429.html CVE-2014-0429 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-0446 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0446.html CVE-2014-0446 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2014-0448 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0448.html CVE-2014-0448 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment. CVE-2014-0449 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0449.html CVE-2014-0449 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412. CVE-2014-0451 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0451.html CVE-2014-0451 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423. CVE-2014-0452 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0452.html CVE-2014-0452 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security. CVE-2014-0453 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 4 AV:N/AC:H/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0453.html CVE-2014-0453 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. CVE-2014-0454 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0454.html CVE-2014-0454 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402. CVE-2014-0455 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0455.html CVE-2014-0455 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-0457 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0457.html CVE-2014-0457 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423. CVE-2014-0458 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0458.html CVE-2014-0458 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D. CVE-2014-0459 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0459.html CVE-2014-0459 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. CVE-2014-0460 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0460.html CVE-2014-0460 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-0461 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0461.html CVE-2014-0461 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output. CVE-2014-0878 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-0878.html CVE-2014-0878 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log. CVE-2014-1876 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-1876.html CVE-2014-1876 https://bugzilla.suse.com/863305 SUSE Bug 863305 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc. CVE-2014-2398 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2398.html CVE-2014-2398 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2014-2401 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2401.html CVE-2014-2401 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455. CVE-2014-2402 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2402.html CVE-2014-2402 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment. CVE-2014-2409 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2409.html CVE-2014-2409 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451. CVE-2014-2412 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2412.html CVE-2014-2412 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB. CVE-2014-2414 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2414.html CVE-2014-2414 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment. CVE-2014-2420 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2420.html CVE-2014-2420 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2014-2421 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2421.html CVE-2014-2421 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458. CVE-2014-2423 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2423.html CVE-2014-2423 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. CVE-2014-2427 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2427.html CVE-2014-2427 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2014-2428 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-2428.html CVE-2014-2428 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager. CVE-2014-8891 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-8891.html CVE-2014-8891 https://bugzilla.suse.com/916266 SUSE Bug 916266 Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager. CVE-2014-8892 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.8 AV:N/AC:L/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2014-8892.html CVE-2014-8892 https://bugzilla.suse.com/916265 SUSE Bug 916265 GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204. CVE-2015-0138 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0138.html CVE-2015-0138 https://bugzilla.suse.com/952088 SUSE Bug 952088 Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine. CVE-2015-0192 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0192.html CVE-2015-0192 https://bugzilla.suse.com/952088 SUSE Bug 952088 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations. CVE-2015-0204 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0204.html CVE-2015-0204 https://bugzilla.suse.com/912014 SUSE Bug 912014 https://bugzilla.suse.com/920482 SUSE Bug 920482 https://bugzilla.suse.com/920484 SUSE Bug 920484 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936787 SUSE Bug 936787 https://bugzilla.suse.com/952088 SUSE Bug 952088 Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2015-0458 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0458.html CVE-2015-0458 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491. CVE-2015-0459 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0459.html CVE-2015-0459 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/932310 SUSE Bug 932310 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2015-0469 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0469.html CVE-2015-0469 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/932310 SUSE Bug 932310 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans. CVE-2015-0477 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0477.html CVE-2015-0477 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE. CVE-2015-0478 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0478.html CVE-2015-0478 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/944456 SUSE Bug 944456 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools. CVE-2015-0480 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0480.html CVE-2015-0480 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE. CVE-2015-0488 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0488.html CVE-2015-0488 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459. CVE-2015-0491 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-0491.html CVE-2015-0491 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/932310 SUSE Bug 932310 IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine. CVE-2015-1914 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 critical 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-1914.html CVE-2015-1914 https://bugzilla.suse.com/952088 SUSE Bug 952088 The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue. CVE-2015-2808 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1 important 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/ https://www.suse.com/security/cve/CVE-2015-2808.html CVE-2015-2808 https://bugzilla.suse.com/925378 SUSE Bug 925378 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 https://bugzilla.suse.com/952088 SUSE Bug 952088