java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:10534 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z java-1_7_0-openjdk-1.7.0.121-1.1 on GA media These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-10534 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:10534 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2011-3563/ SUSE CVE CVE-2011-3563 page https://www.suse.com/security/cve/CVE-2011-3571/ SUSE CVE CVE-2011-3571 page https://www.suse.com/security/cve/CVE-2011-5035/ SUSE CVE CVE-2011-5035 page https://www.suse.com/security/cve/CVE-2012-0497/ SUSE CVE CVE-2012-0497 page https://www.suse.com/security/cve/CVE-2012-0501/ SUSE CVE CVE-2012-0501 page https://www.suse.com/security/cve/CVE-2012-0502/ SUSE CVE CVE-2012-0502 page https://www.suse.com/security/cve/CVE-2012-0503/ SUSE CVE CVE-2012-0503 page https://www.suse.com/security/cve/CVE-2012-0505/ SUSE CVE CVE-2012-0505 page https://www.suse.com/security/cve/CVE-2012-0506/ SUSE CVE CVE-2012-0506 page https://www.suse.com/security/cve/CVE-2012-0547/ SUSE CVE CVE-2012-0547 page https://www.suse.com/security/cve/CVE-2012-1682/ SUSE CVE CVE-2012-1682 page https://www.suse.com/security/cve/CVE-2012-1711/ SUSE CVE CVE-2012-1711 page https://www.suse.com/security/cve/CVE-2012-1713/ SUSE CVE CVE-2012-1713 page https://www.suse.com/security/cve/CVE-2012-1716/ SUSE CVE CVE-2012-1716 page https://www.suse.com/security/cve/CVE-2012-1717/ SUSE CVE CVE-2012-1717 page https://www.suse.com/security/cve/CVE-2012-1718/ SUSE CVE CVE-2012-1718 page https://www.suse.com/security/cve/CVE-2012-1719/ SUSE CVE CVE-2012-1719 page https://www.suse.com/security/cve/CVE-2012-1723/ SUSE CVE CVE-2012-1723 page https://www.suse.com/security/cve/CVE-2012-1724/ SUSE CVE CVE-2012-1724 page https://www.suse.com/security/cve/CVE-2012-1725/ SUSE CVE CVE-2012-1725 page https://www.suse.com/security/cve/CVE-2012-1726/ SUSE CVE CVE-2012-1726 page https://www.suse.com/security/cve/CVE-2012-3136/ SUSE CVE CVE-2012-3136 page https://www.suse.com/security/cve/CVE-2012-3174/ SUSE CVE CVE-2012-3174 page https://www.suse.com/security/cve/CVE-2012-3216/ SUSE CVE CVE-2012-3216 page https://www.suse.com/security/cve/CVE-2012-4416/ SUSE CVE CVE-2012-4416 page https://www.suse.com/security/cve/CVE-2012-4681/ SUSE CVE CVE-2012-4681 page https://www.suse.com/security/cve/CVE-2012-5068/ SUSE CVE CVE-2012-5068 page https://www.suse.com/security/cve/CVE-2012-5069/ SUSE CVE CVE-2012-5069 page https://www.suse.com/security/cve/CVE-2012-5070/ SUSE CVE CVE-2012-5070 page https://www.suse.com/security/cve/CVE-2012-5071/ SUSE CVE CVE-2012-5071 page https://www.suse.com/security/cve/CVE-2012-5072/ SUSE CVE CVE-2012-5072 page https://www.suse.com/security/cve/CVE-2012-5073/ SUSE CVE CVE-2012-5073 page https://www.suse.com/security/cve/CVE-2012-5074/ SUSE CVE CVE-2012-5074 page https://www.suse.com/security/cve/CVE-2012-5075/ SUSE CVE CVE-2012-5075 page https://www.suse.com/security/cve/CVE-2012-5076/ SUSE CVE CVE-2012-5076 page https://www.suse.com/security/cve/CVE-2012-5077/ SUSE CVE CVE-2012-5077 page https://www.suse.com/security/cve/CVE-2012-5079/ SUSE CVE CVE-2012-5079 page https://www.suse.com/security/cve/CVE-2012-5081/ SUSE CVE CVE-2012-5081 page https://www.suse.com/security/cve/CVE-2012-5084/ SUSE CVE CVE-2012-5084 page https://www.suse.com/security/cve/CVE-2012-5085/ SUSE CVE CVE-2012-5085 page https://www.suse.com/security/cve/CVE-2012-5086/ SUSE CVE CVE-2012-5086 page https://www.suse.com/security/cve/CVE-2012-5087/ SUSE CVE CVE-2012-5087 page https://www.suse.com/security/cve/CVE-2012-5088/ SUSE CVE CVE-2012-5088 page https://www.suse.com/security/cve/CVE-2012-5089/ SUSE CVE CVE-2012-5089 page https://www.suse.com/security/cve/CVE-2013-0169/ SUSE CVE CVE-2013-0169 page https://www.suse.com/security/cve/CVE-2013-0401/ SUSE CVE CVE-2013-0401 page https://www.suse.com/security/cve/CVE-2013-0422/ SUSE CVE CVE-2013-0422 page https://www.suse.com/security/cve/CVE-2013-0424/ SUSE CVE CVE-2013-0424 page https://www.suse.com/security/cve/CVE-2013-0425/ SUSE CVE CVE-2013-0425 page https://www.suse.com/security/cve/CVE-2013-0426/ SUSE CVE CVE-2013-0426 page https://www.suse.com/security/cve/CVE-2013-0427/ SUSE CVE CVE-2013-0427 page https://www.suse.com/security/cve/CVE-2013-0428/ SUSE CVE CVE-2013-0428 page https://www.suse.com/security/cve/CVE-2013-0429/ SUSE CVE CVE-2013-0429 page https://www.suse.com/security/cve/CVE-2013-0431/ SUSE CVE CVE-2013-0431 page https://www.suse.com/security/cve/CVE-2013-0432/ SUSE CVE CVE-2013-0432 page https://www.suse.com/security/cve/CVE-2013-0433/ SUSE CVE CVE-2013-0433 page https://www.suse.com/security/cve/CVE-2013-0434/ SUSE CVE CVE-2013-0434 page https://www.suse.com/security/cve/CVE-2013-0435/ SUSE CVE CVE-2013-0435 page https://www.suse.com/security/cve/CVE-2013-0440/ SUSE CVE CVE-2013-0440 page https://www.suse.com/security/cve/CVE-2013-0441/ SUSE CVE CVE-2013-0441 page https://www.suse.com/security/cve/CVE-2013-0442/ SUSE CVE CVE-2013-0442 page https://www.suse.com/security/cve/CVE-2013-0443/ SUSE CVE CVE-2013-0443 page https://www.suse.com/security/cve/CVE-2013-0444/ SUSE CVE CVE-2013-0444 page https://www.suse.com/security/cve/CVE-2013-0450/ SUSE CVE CVE-2013-0450 page https://www.suse.com/security/cve/CVE-2013-0809/ SUSE CVE CVE-2013-0809 page https://www.suse.com/security/cve/CVE-2013-1475/ SUSE CVE CVE-2013-1475 page https://www.suse.com/security/cve/CVE-2013-1476/ SUSE CVE CVE-2013-1476 page https://www.suse.com/security/cve/CVE-2013-1478/ SUSE CVE CVE-2013-1478 page https://www.suse.com/security/cve/CVE-2013-1480/ SUSE CVE CVE-2013-1480 page https://www.suse.com/security/cve/CVE-2013-1484/ SUSE CVE CVE-2013-1484 page https://www.suse.com/security/cve/CVE-2013-1485/ SUSE CVE CVE-2013-1485 page https://www.suse.com/security/cve/CVE-2013-1486/ SUSE CVE CVE-2013-1486 page https://www.suse.com/security/cve/CVE-2013-1488/ SUSE CVE CVE-2013-1488 page https://www.suse.com/security/cve/CVE-2013-1493/ SUSE CVE CVE-2013-1493 page https://www.suse.com/security/cve/CVE-2013-1500/ SUSE CVE CVE-2013-1500 page https://www.suse.com/security/cve/CVE-2013-1518/ SUSE CVE CVE-2013-1518 page https://www.suse.com/security/cve/CVE-2013-1537/ SUSE CVE CVE-2013-1537 page https://www.suse.com/security/cve/CVE-2013-1557/ SUSE CVE CVE-2013-1557 page https://www.suse.com/security/cve/CVE-2013-1569/ SUSE CVE CVE-2013-1569 page https://www.suse.com/security/cve/CVE-2013-1571/ SUSE CVE CVE-2013-1571 page https://www.suse.com/security/cve/CVE-2013-2383/ SUSE CVE CVE-2013-2383 page https://www.suse.com/security/cve/CVE-2013-2384/ SUSE CVE CVE-2013-2384 page https://www.suse.com/security/cve/CVE-2013-2407/ SUSE CVE CVE-2013-2407 page https://www.suse.com/security/cve/CVE-2013-2412/ SUSE CVE CVE-2013-2412 page https://www.suse.com/security/cve/CVE-2013-2415/ SUSE CVE CVE-2013-2415 page https://www.suse.com/security/cve/CVE-2013-2417/ SUSE CVE CVE-2013-2417 page https://www.suse.com/security/cve/CVE-2013-2419/ SUSE CVE CVE-2013-2419 page https://www.suse.com/security/cve/CVE-2013-2420/ SUSE CVE CVE-2013-2420 page https://www.suse.com/security/cve/CVE-2013-2421/ SUSE CVE CVE-2013-2421 page https://www.suse.com/security/cve/CVE-2013-2422/ SUSE CVE CVE-2013-2422 page https://www.suse.com/security/cve/CVE-2013-2423/ SUSE CVE CVE-2013-2423 page https://www.suse.com/security/cve/CVE-2013-2424/ SUSE CVE CVE-2013-2424 page https://www.suse.com/security/cve/CVE-2013-2426/ SUSE CVE CVE-2013-2426 page https://www.suse.com/security/cve/CVE-2013-2429/ SUSE CVE CVE-2013-2429 page https://www.suse.com/security/cve/CVE-2013-2430/ SUSE CVE CVE-2013-2430 page https://www.suse.com/security/cve/CVE-2013-2431/ SUSE CVE CVE-2013-2431 page https://www.suse.com/security/cve/CVE-2013-2436/ SUSE CVE CVE-2013-2436 page https://www.suse.com/security/cve/CVE-2013-2443/ SUSE CVE CVE-2013-2443 page https://www.suse.com/security/cve/CVE-2013-2444/ SUSE CVE CVE-2013-2444 page https://www.suse.com/security/cve/CVE-2013-2445/ SUSE CVE CVE-2013-2445 page https://www.suse.com/security/cve/CVE-2013-2446/ SUSE CVE CVE-2013-2446 page https://www.suse.com/security/cve/CVE-2013-2447/ SUSE CVE CVE-2013-2447 page https://www.suse.com/security/cve/CVE-2013-2448/ SUSE CVE CVE-2013-2448 page https://www.suse.com/security/cve/CVE-2013-2449/ SUSE CVE CVE-2013-2449 page https://www.suse.com/security/cve/CVE-2013-2450/ SUSE CVE CVE-2013-2450 page https://www.suse.com/security/cve/CVE-2013-2451/ SUSE CVE CVE-2013-2451 page https://www.suse.com/security/cve/CVE-2013-2452/ SUSE CVE CVE-2013-2452 page https://www.suse.com/security/cve/CVE-2013-2453/ SUSE CVE CVE-2013-2453 page https://www.suse.com/security/cve/CVE-2013-2454/ SUSE CVE CVE-2013-2454 page https://www.suse.com/security/cve/CVE-2013-2455/ SUSE CVE CVE-2013-2455 page https://www.suse.com/security/cve/CVE-2013-2456/ SUSE CVE CVE-2013-2456 page https://www.suse.com/security/cve/CVE-2013-2457/ SUSE CVE CVE-2013-2457 page https://www.suse.com/security/cve/CVE-2013-2458/ SUSE CVE CVE-2013-2458 page https://www.suse.com/security/cve/CVE-2013-2459/ SUSE CVE CVE-2013-2459 page https://www.suse.com/security/cve/CVE-2013-2460/ SUSE CVE CVE-2013-2460 page https://www.suse.com/security/cve/CVE-2013-2461/ SUSE CVE CVE-2013-2461 page https://www.suse.com/security/cve/CVE-2013-2463/ SUSE CVE CVE-2013-2463 page https://www.suse.com/security/cve/CVE-2013-2465/ SUSE CVE CVE-2013-2465 page https://www.suse.com/security/cve/CVE-2013-2469/ SUSE CVE CVE-2013-2469 page https://www.suse.com/security/cve/CVE-2013-2470/ SUSE CVE CVE-2013-2470 page https://www.suse.com/security/cve/CVE-2013-2471/ SUSE CVE CVE-2013-2471 page https://www.suse.com/security/cve/CVE-2013-2472/ SUSE CVE CVE-2013-2472 page https://www.suse.com/security/cve/CVE-2013-2473/ SUSE CVE CVE-2013-2473 page https://www.suse.com/security/cve/CVE-2013-3829/ SUSE CVE CVE-2013-3829 page https://www.suse.com/security/cve/CVE-2013-4002/ SUSE CVE CVE-2013-4002 page https://www.suse.com/security/cve/CVE-2013-5772/ SUSE CVE CVE-2013-5772 page https://www.suse.com/security/cve/CVE-2013-5774/ SUSE CVE CVE-2013-5774 page https://www.suse.com/security/cve/CVE-2013-5778/ SUSE CVE CVE-2013-5778 page https://www.suse.com/security/cve/CVE-2013-5780/ SUSE CVE CVE-2013-5780 page https://www.suse.com/security/cve/CVE-2013-5782/ SUSE CVE CVE-2013-5782 page https://www.suse.com/security/cve/CVE-2013-5783/ SUSE CVE CVE-2013-5783 page https://www.suse.com/security/cve/CVE-2013-5784/ SUSE CVE CVE-2013-5784 page https://www.suse.com/security/cve/CVE-2013-5790/ SUSE CVE CVE-2013-5790 page https://www.suse.com/security/cve/CVE-2013-5797/ SUSE CVE CVE-2013-5797 page https://www.suse.com/security/cve/CVE-2013-5800/ SUSE CVE CVE-2013-5800 page https://www.suse.com/security/cve/CVE-2013-5802/ SUSE CVE CVE-2013-5802 page https://www.suse.com/security/cve/CVE-2013-5803/ SUSE CVE CVE-2013-5803 page https://www.suse.com/security/cve/CVE-2013-5804/ SUSE CVE CVE-2013-5804 page https://www.suse.com/security/cve/CVE-2013-5805/ SUSE CVE CVE-2013-5805 page https://www.suse.com/security/cve/CVE-2013-5806/ SUSE CVE CVE-2013-5806 page https://www.suse.com/security/cve/CVE-2013-5809/ SUSE CVE CVE-2013-5809 page https://www.suse.com/security/cve/CVE-2013-5814/ SUSE CVE CVE-2013-5814 page https://www.suse.com/security/cve/CVE-2013-5817/ SUSE CVE CVE-2013-5817 page https://www.suse.com/security/cve/CVE-2013-5820/ SUSE CVE CVE-2013-5820 page https://www.suse.com/security/cve/CVE-2013-5823/ SUSE CVE CVE-2013-5823 page https://www.suse.com/security/cve/CVE-2013-5825/ SUSE CVE CVE-2013-5825 page https://www.suse.com/security/cve/CVE-2013-5829/ SUSE CVE CVE-2013-5829 page https://www.suse.com/security/cve/CVE-2013-5830/ SUSE CVE CVE-2013-5830 page https://www.suse.com/security/cve/CVE-2013-5840/ SUSE CVE CVE-2013-5840 page https://www.suse.com/security/cve/CVE-2013-5842/ SUSE CVE CVE-2013-5842 page https://www.suse.com/security/cve/CVE-2013-5849/ SUSE CVE CVE-2013-5849 page https://www.suse.com/security/cve/CVE-2013-5850/ SUSE CVE CVE-2013-5850 page https://www.suse.com/security/cve/CVE-2013-5851/ SUSE CVE CVE-2013-5851 page https://www.suse.com/security/cve/CVE-2013-5878/ SUSE CVE CVE-2013-5878 page https://www.suse.com/security/cve/CVE-2013-5884/ SUSE CVE CVE-2013-5884 page https://www.suse.com/security/cve/CVE-2013-5893/ SUSE CVE CVE-2013-5893 page https://www.suse.com/security/cve/CVE-2013-5896/ SUSE CVE CVE-2013-5896 page https://www.suse.com/security/cve/CVE-2013-5907/ SUSE CVE CVE-2013-5907 page https://www.suse.com/security/cve/CVE-2013-5910/ SUSE CVE CVE-2013-5910 page https://www.suse.com/security/cve/CVE-2013-6629/ SUSE CVE CVE-2013-6629 page https://www.suse.com/security/cve/CVE-2013-6954/ SUSE CVE CVE-2013-6954 page https://www.suse.com/security/cve/CVE-2014-0368/ SUSE CVE CVE-2014-0368 page https://www.suse.com/security/cve/CVE-2014-0373/ SUSE CVE CVE-2014-0373 page https://www.suse.com/security/cve/CVE-2014-0376/ SUSE CVE CVE-2014-0376 page https://www.suse.com/security/cve/CVE-2014-0408/ SUSE CVE CVE-2014-0408 page https://www.suse.com/security/cve/CVE-2014-0411/ SUSE CVE CVE-2014-0411 page https://www.suse.com/security/cve/CVE-2014-0416/ SUSE CVE CVE-2014-0416 page https://www.suse.com/security/cve/CVE-2014-0422/ SUSE CVE CVE-2014-0422 page https://www.suse.com/security/cve/CVE-2014-0423/ SUSE CVE CVE-2014-0423 page https://www.suse.com/security/cve/CVE-2014-0428/ SUSE CVE CVE-2014-0428 page https://www.suse.com/security/cve/CVE-2014-0429/ SUSE CVE CVE-2014-0429 page https://www.suse.com/security/cve/CVE-2014-0446/ SUSE CVE CVE-2014-0446 page https://www.suse.com/security/cve/CVE-2014-0451/ SUSE CVE CVE-2014-0451 page https://www.suse.com/security/cve/CVE-2014-0452/ SUSE CVE CVE-2014-0452 page https://www.suse.com/security/cve/CVE-2014-0453/ SUSE CVE CVE-2014-0453 page https://www.suse.com/security/cve/CVE-2014-0454/ SUSE CVE CVE-2014-0454 page https://www.suse.com/security/cve/CVE-2014-0455/ SUSE CVE CVE-2014-0455 page https://www.suse.com/security/cve/CVE-2014-0456/ SUSE CVE CVE-2014-0456 page https://www.suse.com/security/cve/CVE-2014-0457/ SUSE CVE CVE-2014-0457 page https://www.suse.com/security/cve/CVE-2014-0458/ SUSE CVE CVE-2014-0458 page https://www.suse.com/security/cve/CVE-2014-0459/ SUSE CVE CVE-2014-0459 page https://www.suse.com/security/cve/CVE-2014-0460/ SUSE CVE CVE-2014-0460 page https://www.suse.com/security/cve/CVE-2014-0461/ SUSE CVE CVE-2014-0461 page https://www.suse.com/security/cve/CVE-2014-1876/ SUSE CVE CVE-2014-1876 page https://www.suse.com/security/cve/CVE-2014-2397/ SUSE CVE CVE-2014-2397 page https://www.suse.com/security/cve/CVE-2014-2398/ SUSE CVE CVE-2014-2398 page https://www.suse.com/security/cve/CVE-2014-2402/ SUSE CVE CVE-2014-2402 page https://www.suse.com/security/cve/CVE-2014-2403/ SUSE CVE CVE-2014-2403 page https://www.suse.com/security/cve/CVE-2014-2412/ SUSE CVE CVE-2014-2412 page https://www.suse.com/security/cve/CVE-2014-2413/ SUSE CVE CVE-2014-2413 page https://www.suse.com/security/cve/CVE-2014-2414/ SUSE CVE CVE-2014-2414 page https://www.suse.com/security/cve/CVE-2014-2421/ SUSE CVE CVE-2014-2421 page https://www.suse.com/security/cve/CVE-2014-2423/ SUSE CVE CVE-2014-2423 page https://www.suse.com/security/cve/CVE-2014-2427/ SUSE CVE CVE-2014-2427 page https://www.suse.com/security/cve/CVE-2014-2483/ SUSE CVE CVE-2014-2483 page https://www.suse.com/security/cve/CVE-2014-2490/ SUSE CVE CVE-2014-2490 page https://www.suse.com/security/cve/CVE-2014-3566/ SUSE CVE CVE-2014-3566 page https://www.suse.com/security/cve/CVE-2014-4209/ SUSE CVE CVE-2014-4209 page https://www.suse.com/security/cve/CVE-2014-4216/ SUSE CVE CVE-2014-4216 page https://www.suse.com/security/cve/CVE-2014-4218/ SUSE CVE CVE-2014-4218 page https://www.suse.com/security/cve/CVE-2014-4219/ SUSE CVE CVE-2014-4219 page https://www.suse.com/security/cve/CVE-2014-4221/ SUSE CVE CVE-2014-4221 page https://www.suse.com/security/cve/CVE-2014-4223/ SUSE CVE CVE-2014-4223 page https://www.suse.com/security/cve/CVE-2014-4244/ SUSE CVE CVE-2014-4244 page https://www.suse.com/security/cve/CVE-2014-4252/ SUSE CVE CVE-2014-4252 page https://www.suse.com/security/cve/CVE-2014-4262/ SUSE CVE CVE-2014-4262 page https://www.suse.com/security/cve/CVE-2014-4263/ SUSE CVE CVE-2014-4263 page https://www.suse.com/security/cve/CVE-2014-4264/ SUSE CVE CVE-2014-4264 page https://www.suse.com/security/cve/CVE-2014-4266/ SUSE CVE CVE-2014-4266 page https://www.suse.com/security/cve/CVE-2014-4268/ SUSE CVE CVE-2014-4268 page https://www.suse.com/security/cve/CVE-2014-6457/ SUSE CVE CVE-2014-6457 page https://www.suse.com/security/cve/CVE-2014-6502/ SUSE CVE CVE-2014-6502 page https://www.suse.com/security/cve/CVE-2014-6504/ SUSE CVE CVE-2014-6504 page https://www.suse.com/security/cve/CVE-2014-6506/ SUSE CVE CVE-2014-6506 page https://www.suse.com/security/cve/CVE-2014-6511/ SUSE CVE CVE-2014-6511 page https://www.suse.com/security/cve/CVE-2014-6512/ SUSE CVE CVE-2014-6512 page https://www.suse.com/security/cve/CVE-2014-6513/ SUSE CVE CVE-2014-6513 page https://www.suse.com/security/cve/CVE-2014-6517/ SUSE CVE CVE-2014-6517 page https://www.suse.com/security/cve/CVE-2014-6519/ SUSE CVE CVE-2014-6519 page https://www.suse.com/security/cve/CVE-2014-6531/ SUSE CVE CVE-2014-6531 page https://www.suse.com/security/cve/CVE-2014-6558/ SUSE CVE CVE-2014-6558 page https://www.suse.com/security/cve/CVE-2014-6585/ SUSE CVE CVE-2014-6585 page https://www.suse.com/security/cve/CVE-2014-6587/ SUSE CVE CVE-2014-6587 page https://www.suse.com/security/cve/CVE-2014-6591/ SUSE CVE CVE-2014-6591 page https://www.suse.com/security/cve/CVE-2014-6593/ SUSE CVE CVE-2014-6593 page https://www.suse.com/security/cve/CVE-2014-6601/ SUSE CVE CVE-2014-6601 page https://www.suse.com/security/cve/CVE-2015-0383/ SUSE CVE CVE-2015-0383 page https://www.suse.com/security/cve/CVE-2015-0395/ SUSE CVE CVE-2015-0395 page https://www.suse.com/security/cve/CVE-2015-0400/ SUSE CVE CVE-2015-0400 page https://www.suse.com/security/cve/CVE-2015-0407/ SUSE CVE CVE-2015-0407 page https://www.suse.com/security/cve/CVE-2015-0408/ SUSE CVE CVE-2015-0408 page https://www.suse.com/security/cve/CVE-2015-0410/ SUSE CVE CVE-2015-0410 page https://www.suse.com/security/cve/CVE-2015-0412/ SUSE CVE CVE-2015-0412 page https://www.suse.com/security/cve/CVE-2015-0460/ SUSE CVE CVE-2015-0460 page https://www.suse.com/security/cve/CVE-2015-0469/ SUSE CVE CVE-2015-0469 page https://www.suse.com/security/cve/CVE-2015-0477/ SUSE CVE CVE-2015-0477 page https://www.suse.com/security/cve/CVE-2015-0478/ SUSE CVE CVE-2015-0478 page https://www.suse.com/security/cve/CVE-2015-0480/ SUSE CVE CVE-2015-0480 page https://www.suse.com/security/cve/CVE-2015-0488/ SUSE CVE CVE-2015-0488 page https://www.suse.com/security/cve/CVE-2015-2590/ SUSE CVE CVE-2015-2590 page https://www.suse.com/security/cve/CVE-2015-2601/ SUSE CVE CVE-2015-2601 page https://www.suse.com/security/cve/CVE-2015-2613/ SUSE CVE CVE-2015-2613 page https://www.suse.com/security/cve/CVE-2015-2621/ SUSE CVE CVE-2015-2621 page https://www.suse.com/security/cve/CVE-2015-2625/ SUSE CVE CVE-2015-2625 page https://www.suse.com/security/cve/CVE-2015-2628/ SUSE CVE CVE-2015-2628 page https://www.suse.com/security/cve/CVE-2015-2632/ SUSE CVE CVE-2015-2632 page https://www.suse.com/security/cve/CVE-2015-2808/ SUSE CVE CVE-2015-2808 page https://www.suse.com/security/cve/CVE-2015-4000/ SUSE CVE CVE-2015-4000 page https://www.suse.com/security/cve/CVE-2015-4731/ SUSE CVE CVE-2015-4731 page https://www.suse.com/security/cve/CVE-2015-4732/ SUSE CVE CVE-2015-4732 page https://www.suse.com/security/cve/CVE-2015-4733/ SUSE CVE CVE-2015-4733 page https://www.suse.com/security/cve/CVE-2015-4734/ SUSE CVE CVE-2015-4734 page https://www.suse.com/security/cve/CVE-2015-4748/ SUSE CVE CVE-2015-4748 page https://www.suse.com/security/cve/CVE-2015-4749/ SUSE CVE CVE-2015-4749 page https://www.suse.com/security/cve/CVE-2015-4760/ SUSE CVE CVE-2015-4760 page https://www.suse.com/security/cve/CVE-2015-4803/ SUSE CVE CVE-2015-4803 page https://www.suse.com/security/cve/CVE-2015-4805/ SUSE CVE CVE-2015-4805 page https://www.suse.com/security/cve/CVE-2015-4806/ SUSE CVE CVE-2015-4806 page https://www.suse.com/security/cve/CVE-2015-4835/ SUSE CVE CVE-2015-4835 page https://www.suse.com/security/cve/CVE-2015-4840/ SUSE CVE CVE-2015-4840 page https://www.suse.com/security/cve/CVE-2015-4842/ SUSE CVE CVE-2015-4842 page https://www.suse.com/security/cve/CVE-2015-4843/ SUSE CVE CVE-2015-4843 page https://www.suse.com/security/cve/CVE-2015-4844/ SUSE CVE CVE-2015-4844 page https://www.suse.com/security/cve/CVE-2015-4860/ SUSE CVE CVE-2015-4860 page https://www.suse.com/security/cve/CVE-2015-4871/ SUSE CVE CVE-2015-4871 page https://www.suse.com/security/cve/CVE-2015-4872/ SUSE CVE CVE-2015-4872 page https://www.suse.com/security/cve/CVE-2015-4881/ SUSE CVE CVE-2015-4881 page https://www.suse.com/security/cve/CVE-2015-4882/ SUSE CVE CVE-2015-4882 page https://www.suse.com/security/cve/CVE-2015-4883/ SUSE CVE CVE-2015-4883 page https://www.suse.com/security/cve/CVE-2015-4893/ SUSE CVE CVE-2015-4893 page https://www.suse.com/security/cve/CVE-2015-4903/ SUSE CVE CVE-2015-4903 page https://www.suse.com/security/cve/CVE-2015-4911/ SUSE CVE CVE-2015-4911 page https://www.suse.com/security/cve/CVE-2015-7575/ SUSE CVE CVE-2015-7575 page https://www.suse.com/security/cve/CVE-2015-8126/ SUSE CVE CVE-2015-8126 page https://www.suse.com/security/cve/CVE-2015-8472/ SUSE CVE CVE-2015-8472 page https://www.suse.com/security/cve/CVE-2016-0402/ SUSE CVE CVE-2016-0402 page https://www.suse.com/security/cve/CVE-2016-0448/ SUSE CVE CVE-2016-0448 page https://www.suse.com/security/cve/CVE-2016-0466/ SUSE CVE CVE-2016-0466 page https://www.suse.com/security/cve/CVE-2016-0483/ SUSE CVE CVE-2016-0483 page https://www.suse.com/security/cve/CVE-2016-0494/ SUSE CVE CVE-2016-0494 page https://www.suse.com/security/cve/CVE-2016-0636/ SUSE CVE CVE-2016-0636 page https://www.suse.com/security/cve/CVE-2016-0686/ SUSE CVE CVE-2016-0686 page https://www.suse.com/security/cve/CVE-2016-0687/ SUSE CVE CVE-2016-0687 page https://www.suse.com/security/cve/CVE-2016-0695/ SUSE CVE CVE-2016-0695 page https://www.suse.com/security/cve/CVE-2016-3425/ SUSE CVE CVE-2016-3425 page https://www.suse.com/security/cve/CVE-2016-3427/ SUSE CVE CVE-2016-3427 page https://www.suse.com/security/cve/CVE-2016-3458/ SUSE CVE CVE-2016-3458 page https://www.suse.com/security/cve/CVE-2016-3485/ SUSE CVE CVE-2016-3485 page https://www.suse.com/security/cve/CVE-2016-3498/ SUSE CVE CVE-2016-3498 page https://www.suse.com/security/cve/CVE-2016-3500/ SUSE CVE CVE-2016-3500 page https://www.suse.com/security/cve/CVE-2016-3503/ SUSE CVE CVE-2016-3503 page https://www.suse.com/security/cve/CVE-2016-3508/ SUSE CVE CVE-2016-3508 page https://www.suse.com/security/cve/CVE-2016-3511/ SUSE CVE CVE-2016-3511 page https://www.suse.com/security/cve/CVE-2016-3550/ SUSE CVE CVE-2016-3550 page https://www.suse.com/security/cve/CVE-2016-3598/ SUSE CVE CVE-2016-3598 page https://www.suse.com/security/cve/CVE-2016-3606/ SUSE CVE CVE-2016-3606 page https://www.suse.com/security/cve/CVE-2016-3610/ SUSE CVE CVE-2016-3610 page https://www.suse.com/security/cve/CVE-2016-5542/ SUSE CVE CVE-2016-5542 page https://www.suse.com/security/cve/CVE-2016-5554/ SUSE CVE CVE-2016-5554 page https://www.suse.com/security/cve/CVE-2016-5556/ SUSE CVE CVE-2016-5556 page https://www.suse.com/security/cve/CVE-2016-5568/ SUSE CVE CVE-2016-5568 page https://www.suse.com/security/cve/CVE-2016-5573/ SUSE CVE CVE-2016-5573 page https://www.suse.com/security/cve/CVE-2016-5582/ SUSE CVE CVE-2016-5582 page https://www.suse.com/security/cve/CVE-2016-5597/ SUSE CVE CVE-2016-5597 page openSUSE Tumbleweed java-1_7_0-openjdk-1.7.0.121-1.1 java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 java-1_7_0-openjdk-demo-1.7.0.121-1.1 java-1_7_0-openjdk-devel-1.7.0.121-1.1 java-1_7_0-openjdk-headless-1.7.0.121-1.1 java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 java-1_7_0-openjdk-src-1.7.0.121-1.1 java-1_7_0-openjdk-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-demo-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-devel-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-headless-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-src-1.7.0.121-1.1 as a component of openSUSE Tumbleweed Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound. CVE-2011-3563 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-3563.html CVE-2011-3563 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 https://bugzilla.suse.com/763805 SUSE Bug 763805 Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507. CVE-2011-3571 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-3571.html CVE-2011-3571 https://bugzilla.suse.com/742115 SUSE Bug 742115 https://bugzilla.suse.com/747208 SUSE Bug 747208 Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869. CVE-2011-5035 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2011-5035.html CVE-2011-5035 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/757762 SUSE Bug 757762 https://bugzilla.suse.com/758470 SUSE Bug 758470 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2012-0497 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0497.html CVE-2012-0497 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors. CVE-2012-0501 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0501.html CVE-2012-0501 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT. CVE-2012-0502 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0502.html CVE-2012-0502 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 https://bugzilla.suse.com/763805 SUSE Bug 763805 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n. CVE-2012-0503 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0503.html CVE-2012-0503 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 https://bugzilla.suse.com/763805 SUSE Bug 763805 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Serialization. CVE-2012-0505 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0505.html CVE-2012-0505 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 https://bugzilla.suse.com/763805 SUSE Bug 763805 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA. CVE-2012-0506 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0506.html CVE-2012-0506 https://bugzilla.suse.com/747208 SUSE Bug 747208 https://bugzilla.suse.com/758470 SUSE Bug 758470 https://bugzilla.suse.com/763805 SUSE Bug 763805 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references." CVE-2012-0547 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-0547.html CVE-2012-0547 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder." CVE-2012-1682 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1682.html CVE-2012-1682 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/780897 SUSE Bug 780897 https://bugzilla.suse.com/785433 SUSE Bug 785433 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to CORBA. CVE-2012-1711 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1711.html CVE-2012-1711 https://bugzilla.suse.com/766802 SUSE Bug 766802 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2012-1713 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1713.html CVE-2012-1713 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing. CVE-2012-1716 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1716.html CVE-2012-1716 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux. CVE-2012-1717 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1717.html CVE-2012-1717 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security. CVE-2012-1718 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1718.html CVE-2012-1718 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA. CVE-2012-1719 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1719.html CVE-2012-1719 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2012-1723 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1723.html CVE-2012-1723 https://bugzilla.suse.com/766802 SUSE Bug 766802 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP. CVE-2012-1724 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1724.html CVE-2012-1724 https://bugzilla.suse.com/766802 SUSE Bug 766802 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2012-1725 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1725.html CVE-2012-1725 https://bugzilla.suse.com/766802 SUSE Bug 766802 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. CVE-2012-1726 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-1726.html CVE-2012-1726 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682. CVE-2012-3136 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-3136.html CVE-2012-3136 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/780897 SUSE Bug 780897 Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114. CVE-2012-3174 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-3174.html CVE-2012-3174 https://bugzilla.suse.com/798324 SUSE Bug 798324 https://bugzilla.suse.com/798521 SUSE Bug 798521 https://bugzilla.suse.com/798535 SUSE Bug 798535 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2012-3216 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-3216.html CVE-2012-3216 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot. CVE-2012-4416 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-4416.html CVE-2012-4416 https://bugzilla.suse.com/779714 SUSE Bug 779714 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. CVE-2012-4681 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-4681.html CVE-2012-4681 https://bugzilla.suse.com/777499 SUSE Bug 777499 https://bugzilla.suse.com/778629 SUSE Bug 778629 https://bugzilla.suse.com/780897 SUSE Bug 780897 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/798324 SUSE Bug 798324 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2012-5068 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5068.html CVE-2012-5068 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency. CVE-2012-5069 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5069.html CVE-2012-5069 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX. CVE-2012-5070 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5070.html CVE-2012-5070 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX. CVE-2012-5071 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5071.html CVE-2012-5071 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security. CVE-2012-5072 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5072.html CVE-2012-5072 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5079. CVE-2012-5073 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5073.html CVE-2012-5073 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS. CVE-2012-5074 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5074.html CVE-2012-5074 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX. CVE-2012-5075 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5075.html CVE-2012-5075 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS. CVE-2012-5076 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5076.html CVE-2012-5076 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Security. CVE-2012-5077 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5077.html CVE-2012-5077 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5073. CVE-2012-5079 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5079.html CVE-2012-5079 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE. CVE-2012-5081 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5081.html CVE-2012-5081 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing. CVE-2012-5084 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5084.html CVE-2012-5084 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated users to have an unspecified impact via unknown vectors related to Networking. NOTE: the Oracle CPU states that this issue has a 0.0 CVSS score. If so, then this is not a vulnerability and this issue should not be included in CVE. CVE-2012-5085 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5085.html CVE-2012-5085 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. CVE-2012-5086 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5086.html CVE-2012-5086 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. CVE-2012-5087 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5087.html CVE-2012-5087 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2012-5088 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5088.html CVE-2012-5088 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-3143. CVE-2012-5089 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2012-5089.html CVE-2012-5089 https://bugzilla.suse.com/785429 SUSE Bug 785429 https://bugzilla.suse.com/785433 SUSE Bug 785433 https://bugzilla.suse.com/785814 SUSE Bug 785814 https://bugzilla.suse.com/788750 SUSE Bug 788750 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. CVE-2013-0169 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0169.html CVE-2013-0169 https://bugzilla.suse.com/1070148 SUSE Bug 1070148 https://bugzilla.suse.com/1103036 SUSE Bug 1103036 https://bugzilla.suse.com/1103597 SUSE Bug 1103597 https://bugzilla.suse.com/802184 SUSE Bug 802184 https://bugzilla.suse.com/802648 SUSE Bug 802648 https://bugzilla.suse.com/802746 SUSE Bug 802746 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/804654 SUSE Bug 804654 https://bugzilla.suse.com/809839 SUSE Bug 809839 https://bugzilla.suse.com/813366 SUSE Bug 813366 https://bugzilla.suse.com/813939 SUSE Bug 813939 https://bugzilla.suse.com/821818 SUSE Bug 821818 https://bugzilla.suse.com/905106 SUSE Bug 905106 https://bugzilla.suse.com/977584 SUSE Bug 977584 https://bugzilla.suse.com/977616 SUSE Bug 977616 https://bugzilla.suse.com/984977 SUSE Bug 984977 The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions. CVE-2013-0401 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0401.html CVE-2013-0401 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue. CVE-2013-0422 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0422.html CVE-2013-0422 https://bugzilla.suse.com/798324 SUSE Bug 798324 https://bugzilla.suse.com/798521 SUSE Bug 798521 https://bugzilla.suse.com/798535 SUSE Bug 798535 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number. CVE-2013-0424 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0424.html CVE-2013-0424 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0428 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions. CVE-2013-0425 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0425.html CVE-2013-0425 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions. CVE-2013-0426 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0426.html CVE-2013-0426 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted. CVE-2013-0427 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0427.html CVE-2013-0427 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect checks for proxy classes" in the Reflection API. CVE-2013-0428 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0428.html CVE-2013-0428 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue involves the creation of a single PresentationManager that is shared across multiple thread groups, which allows remote attackers to bypass Java sandbox restrictions. CVE-2013-0429 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0429.html CVE-2013-0429 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490. CVE-2013-0431 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0431.html CVE-2013-0431 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient clipboard access premission checks." CVE-2013-0432 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0432.html CVE-2013-0432 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddress data. CVE-2013-0433 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0433.html CVE-2013-0433 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information. CVE-2013-0434 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0434.html CVE-2013-0434 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and "Better handling of UI elements." CVE-2013-0435 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0435.html CVE-2013-0435 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect availability via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to CPU consumption in the SSL/TLS implementation via a large number of ClientHello packets that are not properly handled by (1) ClientHandshaker.java and (2) ServerHandshaker.java. CVE-2013-0440 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0440.html CVE-2013-0440 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-1476 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via certain methods that should not be serialized, aka "missing serialization restriction." CVE-2013-0441 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0441.html CVE-2013-0441 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of "privileges of the code" that bypasses the sandbox. CVE-2013-0442 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0442.html CVE-2013-0442 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect validation of Diffie-Hellman keys, which allows remote attackers to conduct a "small subgroup attack" to force the use of weak session keys or obtain sensitive information about the private key. CVE-2013-0443 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0443.html CVE-2013-0443 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient checks for cached results" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code. CVE-2013-0444 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0444.html CVE-2013-0444 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of "access control context" in the JMX RequiredModelMBean class. CVE-2013-0450 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0450.html CVE-2013-0450 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493. CVE-2013-0809 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-0809.html CVE-2013-0809 https://bugzilla.suse.com/806786 SUSE Bug 806786 https://bugzilla.suse.com/807487 SUSE Bug 807487 https://bugzilla.suse.com/809386 SUSE Bug 809386 https://bugzilla.suse.com/813939 SUSE Bug 813939 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "IIOP type reuse management" in ObjectStreamClass.java. CVE-2013-1475 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1475.html CVE-2013-1475 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors." CVE-2013-1476 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1476.html CVE-2013-1476 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" that can trigger an integer overflow and memory corruption. CVE-2013-1478 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1478.html CVE-2013-1478 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption. CVE-2013-1480 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1480.html CVE-2013-1480 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/801972 SUSE Bug 801972 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/806786 SUSE Bug 806786 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2013-1484 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1484.html CVE-2013-1484 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2013-1485 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1485.html CVE-2013-1485 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. CVE-2013-1486 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1486.html CVE-2013-1486 https://bugzilla.suse.com/798535 SUSE Bug 798535 https://bugzilla.suse.com/803379 SUSE Bug 803379 https://bugzilla.suse.com/804654 SUSE Bug 804654 The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013. CVE-2013-1488 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1488.html CVE-2013-1488 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013. CVE-2013-1493 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1493.html CVE-2013-1493 https://bugzilla.suse.com/806786 SUSE Bug 806786 https://bugzilla.suse.com/807487 SUSE Bug 807487 https://bugzilla.suse.com/809386 SUSE Bug 809386 https://bugzilla.suse.com/813939 SUSE Bug 813939 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory. CVE-2013-1500 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 8.3 AV:N/AC:M/Au:N/C:P/I:C/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1500.html CVE-2013-1500 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions." CVE-2013-1518 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1518.html CVE-2013-1518 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code. CVE-2013-1537 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1537.html CVE-2013-1537 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method. CVE-2013-1557 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1557.html CVE-2013-1557 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-1569 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1569.html CVE-2013-1569 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc. CVE-2013-1571 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-1571.html CVE-2013-1571 https://bugzilla.suse.com/824397 SUSE Bug 824397 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-2383 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2383.html CVE-2013-2383 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-2384 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2384.html CVE-2013-2384 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader." CVE-2013-2407 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2407.html CVE-2013-2407 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box. CVE-2013-2412 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2412.html CVE-2013-2412 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions. CVE-2013-2415 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2415.html CVE-2013-2415 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue. CVE-2013-2417 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2417.html CVE-2013-2417 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2. CVE-2013-2419 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2419.html CVE-2013-2419 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets. CVE-2013-2420 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2420.html CVE-2013-2420 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect MethodHandle lookups, which allows remote attackers to bypass Java sandbox restrictions. CVE-2013-2421 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2421.html CVE-2013-2421 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox. CVE-2013-2422 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2422.html CVE-2013-2422 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager. CVE-2013-2423 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2423.html CVE-2013-2423 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator. CVE-2013-2424 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2424.html CVE-2013-2424 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect invocation of the defaultReadObject method in the ConcurrentHashMap class, which allows remote attackers to bypass the Java sandbox. CVE-2013-2426 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2426.html CVE-2013-2426 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption. CVE-2013-2429 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2429.html CVE-2013-2429 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code. CVE-2013-2430 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2430.html CVE-2013-2430 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to bypassing the Java sandbox using "method handle intrinsic frames." CVE-2013-2431 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2431.html CVE-2013-2431 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/817157 SUSE Bug 817157 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "type checks" and "method handle binding" involving Wrapper.convert. CVE-2013-2436 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2436.html CVE-2013-2436 https://bugzilla.suse.com/816720 SUSE Bug 816720 https://bugzilla.suse.com/819288 SUSE Bug 819288 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class. CVE-2013-2443 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2443.html CVE-2013-2443 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files. CVE-2013-2444 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2444.html CVE-2013-2444 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors." CVE-2013-2445 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2445.html CVE-2013-2445 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams. CVE-2013-2446 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2446.html CVE-2013-2446 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost. CVE-2013-2447 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2447.html CVE-2013-2447 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes." CVE-2013-2448 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2448.html CVE-2013-2448 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path. CVE-2013-2449 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2449.html CVE-2013-2449 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass. CVE-2013-2450 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2450.html CVE-2013-2450 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use. CVE-2013-2451 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2451.html CVE-2013-2451 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class. CVE-2013-2452 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2452.html CVE-2013-2452 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector. CVE-2013-2453 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2453.html CVE-2013-2453 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox. CVE-2013-2454 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2454.html CVE-2013-2454 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods. CVE-2013-2455 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2455.html CVE-2013-2455 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class. CVE-2013-2456 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2456.html CVE-2013-2456 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions. CVE-2013-2457 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2457.html CVE-2013-2457 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles." CVE-2013-2458 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2458.html CVE-2013-2458 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks." CVE-2013-2459 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2459.html CVE-2013-2459 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "insufficient access checks" in the tracing component. CVE-2013-2460 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2460.html CVE-2013-2460 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlier and R28.2.7 and earlier; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June and July 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass verification of XML signatures via vectors related to a "Missing check for [a] valid DOMCanonicalizationMethod canonicalization algorithm." CVE-2013-2461 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2461.html CVE-2013-2461 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D. CVE-2013-2463 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2463.html CVE-2013-2463 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D. CVE-2013-2465 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2465.html CVE-2013-2465 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D. CVE-2013-2469 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2469.html CVE-2013-2469 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing." CVE-2013-2470 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2470.html CVE-2013-2470 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks." CVE-2013-2471 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2471.html CVE-2013-2471 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D. CVE-2013-2472 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2472.html CVE-2013-2472 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D. CVE-2013-2473 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-2473.html CVE-2013-2473 https://bugzilla.suse.com/825624 SUSE Bug 825624 https://bugzilla.suse.com/828665 SUSE Bug 828665 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/829708 SUSE Bug 829708 Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. CVE-2013-3829 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-3829.html CVE-2013-3829 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names. CVE-2013-4002 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-4002.html CVE-2013-4002 https://bugzilla.suse.com/829212 SUSE Bug 829212 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat. CVE-2013-5772 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5772.html CVE-2013-5772 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2013-5774 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5774.html CVE-2013-5774 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2013-5778 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5778.html CVE-2013-5778 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2013-5780 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5780.html CVE-2013-5780 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2013-5782 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5782.html CVE-2013-5782 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing. CVE-2013-5783 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5783.html CVE-2013-5783 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING. CVE-2013-5784 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5784.html CVE-2013-5784 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS. CVE-2013-5790 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5790.html CVE-2013-5790 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc. CVE-2013-5797 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5797.html CVE-2013-5797 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS. CVE-2013-5800 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5800.html CVE-2013-5800 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. CVE-2013-5802 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5802.html CVE-2013-5802 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS. CVE-2013-5803 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5803.html CVE-2013-5803 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc. CVE-2013-5804 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5804.html CVE-2013-5804 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing, a different vulnerability than CVE-2013-5806. CVE-2013-5805 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5805.html CVE-2013-5805 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing, a different vulnerability than CVE-2013-5805. CVE-2013-5806 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5806.html CVE-2013-5806 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829. CVE-2013-5809 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5809.html CVE-2013-5809 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. CVE-2013-5814 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5814.html CVE-2013-5814 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. CVE-2013-5817 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5817.html CVE-2013-5817 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS. CVE-2013-5820 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5820.html CVE-2013-5820 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security. CVE-2013-5823 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5823.html CVE-2013-5823 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP. CVE-2013-5825 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5825.html CVE-2013-5825 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809. CVE-2013-5829 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5829.html CVE-2013-5829 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2013-5830 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5830.html CVE-2013-5830 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2013-5840 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5840.html CVE-2013-5840 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850. CVE-2013-5842 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5842.html CVE-2013-5842 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT. CVE-2013-5849 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5849.html CVE-2013-5849 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842. CVE-2013-5850 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5850.html CVE-2013-5850 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP. CVE-2013-5851 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5851.html CVE-2013-5851 https://bugzilla.suse.com/846177 SUSE Bug 846177 https://bugzilla.suse.com/846999 SUSE Bug 846999 https://bugzilla.suse.com/849212 SUSE Bug 849212 https://bugzilla.suse.com/852367 SUSE Bug 852367 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox. CVE-2013-5878 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5878.html CVE-2013-5878 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories. CVE-2013-5884 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5884.html CVE-2013-5884 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox. CVE-2013-5893 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5893.html CVE-2013-5893 https://bugzilla.suse.com/858818 SUSE Bug 858818 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list. CVE-2013-5896 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5896.html CVE-2013-5896 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file. CVE-2013-5907 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5907.html CVE-2013-5907 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays. CVE-2013-5910 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-5910.html CVE-2013-5910 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image. CVE-2013-6629 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-6629.html CVE-2013-6629 https://bugzilla.suse.com/850430 SUSE Bug 850430 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 https://bugzilla.suse.com/880246 SUSE Bug 880246 The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c. CVE-2013-6954 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2013-6954.html CVE-2013-6954 https://bugzilla.suse.com/856522 SUSE Bug 856522 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox. CVE-2014-0368 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0368.html CVE-2014-0368 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox. CVE-2014-0373 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0373.html CVE-2014-0373 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories." CVE-2014-0376 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0376.html CVE-2014-0376 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-0408 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0408.html CVE-2014-0408 https://bugzilla.suse.com/858818 SUSE Bug 858818 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake. CVE-2014-0411 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0411.html CVE-2014-0411 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance. CVE-2014-0416 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0416.html CVE-2014-0416 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox. CVE-2014-0422 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0422.html CVE-2014-0422 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding. CVE-2014-0423 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0423.html CVE-2014-0423 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox. CVE-2014-0428 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0428.html CVE-2014-0428 https://bugzilla.suse.com/858818 SUSE Bug 858818 https://bugzilla.suse.com/862064 SUSE Bug 862064 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2014-0429 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0429.html CVE-2014-0429 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-0446 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0446.html CVE-2014-0446 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412. CVE-2014-0451 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0451.html CVE-2014-0451 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423. CVE-2014-0452 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0452.html CVE-2014-0452 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security. CVE-2014-0453 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0453.html CVE-2014-0453 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. CVE-2014-0454 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0454.html CVE-2014-0454 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402. CVE-2014-0455 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0455.html CVE-2014-0455 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-0456 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0456.html CVE-2014-0456 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-0457 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0457.html CVE-2014-0457 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423. CVE-2014-0458 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0458.html CVE-2014-0458 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D. CVE-2014-0459 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0459.html CVE-2014-0459 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. CVE-2014-0460 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0460.html CVE-2014-0460 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-0461 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-0461.html CVE-2014-0461 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log. CVE-2014-1876 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-1876.html CVE-2014-1876 https://bugzilla.suse.com/863305 SUSE Bug 863305 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-2397 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2397.html CVE-2014-2397 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc. CVE-2014-2398 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2398.html CVE-2014-2398 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455. CVE-2014-2402 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2402.html CVE-2014-2402 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP. CVE-2014-2403 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2403.html CVE-2014-2403 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451. CVE-2014-2412 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2412.html CVE-2014-2412 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2014-2413 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2413.html CVE-2014-2413 https://bugzilla.suse.com/873873 SUSE Bug 873873 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB. CVE-2014-2414 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2414.html CVE-2014-2414 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2014-2421 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2421.html CVE-2014-2421 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458. CVE-2014-2423 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2423.html CVE-2014-2423 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. CVE-2014-2427 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2427.html CVE-2014-2427 https://bugzilla.suse.com/873872 SUSE Bug 873872 https://bugzilla.suse.com/873873 SUSE Bug 873873 https://bugzilla.suse.com/877429 SUSE Bug 877429 https://bugzilla.suse.com/877430 SUSE Bug 877430 Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations." CVE-2014-2483 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2483.html CVE-2014-2483 https://bugzilla.suse.com/887530 SUSE Bug 887530 Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-2490 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-2490.html CVE-2014-2490 https://bugzilla.suse.com/887530 SUSE Bug 887530 The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. CVE-2014-3566 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-3566.html CVE-2014-3566 https://bugzilla.suse.com/1011293 SUSE Bug 1011293 https://bugzilla.suse.com/1031023 SUSE Bug 1031023 https://bugzilla.suse.com/901223 SUSE Bug 901223 https://bugzilla.suse.com/901254 SUSE Bug 901254 https://bugzilla.suse.com/901277 SUSE Bug 901277 https://bugzilla.suse.com/901748 SUSE Bug 901748 https://bugzilla.suse.com/901757 SUSE Bug 901757 https://bugzilla.suse.com/901759 SUSE Bug 901759 https://bugzilla.suse.com/901889 SUSE Bug 901889 https://bugzilla.suse.com/901968 SUSE Bug 901968 https://bugzilla.suse.com/902229 SUSE Bug 902229 https://bugzilla.suse.com/902233 SUSE Bug 902233 https://bugzilla.suse.com/902476 SUSE Bug 902476 https://bugzilla.suse.com/903405 SUSE Bug 903405 https://bugzilla.suse.com/903684 SUSE Bug 903684 https://bugzilla.suse.com/904889 SUSE Bug 904889 https://bugzilla.suse.com/905106 SUSE Bug 905106 https://bugzilla.suse.com/914041 SUSE Bug 914041 https://bugzilla.suse.com/994144 SUSE Bug 994144 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX. CVE-2014-4209 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4209.html CVE-2014-4209 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-4216 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4216.html CVE-2014-4216 https://bugzilla.suse.com/887530 SUSE Bug 887530 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2014-4218 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4218.html CVE-2014-4218 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-4219 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4219.html CVE-2014-4219 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2014-4221 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4221.html CVE-2014-4221 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-2483. CVE-2014-4223 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4223.html CVE-2014-4223 https://bugzilla.suse.com/887530 SUSE Bug 887530 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security. CVE-2014-4244 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4244.html CVE-2014-4244 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security. CVE-2014-4252 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4252.html CVE-2014-4252 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-4262 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4262.html CVE-2014-4262 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement." CVE-2014-4263 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4263.html CVE-2014-4263 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect availability via unknown vectors related to Security. CVE-2014-4264 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4264.html CVE-2014-4264 https://bugzilla.suse.com/887530 SUSE Bug 887530 Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Serviceability. CVE-2014-4266 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4266.html CVE-2014-4266 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing. CVE-2014-4268 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-4268.html CVE-2014-4268 https://bugzilla.suse.com/887530 SUSE Bug 887530 https://bugzilla.suse.com/891699 SUSE Bug 891699 https://bugzilla.suse.com/891700 SUSE Bug 891700 https://bugzilla.suse.com/891701 SUSE Bug 891701 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. CVE-2014-6457 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6457.html CVE-2014-6457 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2014-6502 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6502.html CVE-2014-6502 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot. CVE-2014-6504 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6504.html CVE-2014-6504 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-6506 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6506.html CVE-2014-6506 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2014-6511 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6511.html CVE-2014-6511 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries. CVE-2014-6512 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6512.html CVE-2014-6512 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. CVE-2014-6513 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6513.html CVE-2014-6513 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP. CVE-2014-6517 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6517.html CVE-2014-6517 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot. CVE-2014-6519 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6519.html CVE-2014-6519 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2014-6531 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6531.html CVE-2014-6531 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security. CVE-2014-6558 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6558.html CVE-2014-6558 https://bugzilla.suse.com/901239 SUSE Bug 901239 https://bugzilla.suse.com/901242 SUSE Bug 901242 https://bugzilla.suse.com/901246 SUSE Bug 901246 https://bugzilla.suse.com/904889 SUSE Bug 904889 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591. CVE-2014-6585 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6585.html CVE-2014-6585 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-6587 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6587.html CVE-2014-6587 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585. CVE-2014-6591 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6591.html CVE-2014-6591 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. CVE-2014-6593 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6593.html CVE-2014-6593 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-6601 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2014-6601.html CVE-2014-6601 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot. CVE-2015-0383 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0383.html CVE-2015-0383 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2015-0395 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0395.html CVE-2015-0395 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2015-0400 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0400.html CVE-2015-0400 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing. CVE-2015-0407 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0407.html CVE-2015-0407 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. CVE-2015-0408 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0408.html CVE-2015-0408 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security. CVE-2015-0410 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0410.html CVE-2015-0410 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS. CVE-2015-0412 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0412.html CVE-2015-0412 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2015-0460 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0460.html CVE-2015-0460 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2015-0469 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0469.html CVE-2015-0469 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/932310 SUSE Bug 932310 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans. CVE-2015-0477 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0477.html CVE-2015-0477 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE. CVE-2015-0478 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0478.html CVE-2015-0478 https://bugzilla.suse.com/927591 SUSE Bug 927591 https://bugzilla.suse.com/944456 SUSE Bug 944456 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools. CVE-2015-0480 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0480.html CVE-2015-0480 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE. CVE-2015-0488 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-0488.html CVE-2015-0488 https://bugzilla.suse.com/927591 SUSE Bug 927591 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732. CVE-2015-2590 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2590.html CVE-2015-2590 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE. CVE-2015-2601 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2601.html CVE-2015-2601 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE. CVE-2015-2613 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2613.html CVE-2015-2613 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 https://bugzilla.suse.com/951727 SUSE Bug 951727 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX. CVE-2015-2621 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2621.html CVE-2015-2621 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE. CVE-2015-2625 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2625.html CVE-2015-2625 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. CVE-2015-2628 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2628.html CVE-2015-2628 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2015-2632 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2632.html CVE-2015-2632 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue. CVE-2015-2808 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-2808.html CVE-2015-2808 https://bugzilla.suse.com/925378 SUSE Bug 925378 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 https://bugzilla.suse.com/952088 SUSE Bug 952088 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. CVE-2015-4000 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 7.3 AV:N/AC:H/Au:N/C:C/I:C/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4000.html CVE-2015-4000 https://bugzilla.suse.com/1074631 SUSE Bug 1074631 https://bugzilla.suse.com/1211968 SUSE Bug 1211968 https://bugzilla.suse.com/931600 SUSE Bug 931600 https://bugzilla.suse.com/931698 SUSE Bug 931698 https://bugzilla.suse.com/931723 SUSE Bug 931723 https://bugzilla.suse.com/931845 SUSE Bug 931845 https://bugzilla.suse.com/932026 SUSE Bug 932026 https://bugzilla.suse.com/932483 SUSE Bug 932483 https://bugzilla.suse.com/934789 SUSE Bug 934789 https://bugzilla.suse.com/935033 SUSE Bug 935033 https://bugzilla.suse.com/935540 SUSE Bug 935540 https://bugzilla.suse.com/935979 SUSE Bug 935979 https://bugzilla.suse.com/937202 SUSE Bug 937202 https://bugzilla.suse.com/937766 SUSE Bug 937766 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938432 SUSE Bug 938432 https://bugzilla.suse.com/938895 SUSE Bug 938895 https://bugzilla.suse.com/938905 SUSE Bug 938905 https://bugzilla.suse.com/938906 SUSE Bug 938906 https://bugzilla.suse.com/938913 SUSE Bug 938913 https://bugzilla.suse.com/938945 SUSE Bug 938945 https://bugzilla.suse.com/943664 SUSE Bug 943664 https://bugzilla.suse.com/944729 SUSE Bug 944729 https://bugzilla.suse.com/945582 SUSE Bug 945582 https://bugzilla.suse.com/955589 SUSE Bug 955589 https://bugzilla.suse.com/980406 SUSE Bug 980406 https://bugzilla.suse.com/990592 SUSE Bug 990592 https://bugzilla.suse.com/994144 SUSE Bug 994144 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. CVE-2015-4731 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4731.html CVE-2015-4731 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590. CVE-2015-4732 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4732.html CVE-2015-4732 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. CVE-2015-4733 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4733.html CVE-2015-4733 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS. CVE-2015-4734 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4734.html CVE-2015-4734 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. CVE-2015-4748 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4748.html CVE-2015-4748 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI. CVE-2015-4749 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4749.html CVE-2015-4749 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2015-4760 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4760.html CVE-2015-4760 https://bugzilla.suse.com/937828 SUSE Bug 937828 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938895 SUSE Bug 938895 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911. CVE-2015-4803 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4803.html CVE-2015-4803 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization. CVE-2015-4805 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4805.html CVE-2015-4805 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. CVE-2015-4806 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4806.html CVE-2015-4806 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881. CVE-2015-4835 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4835.html CVE-2015-4835 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D. CVE-2015-4840 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4840.html CVE-2015-4840 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP. CVE-2015-4842 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4842.html CVE-2015-4842 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2015-4843 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4843.html CVE-2015-4843 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2015-4844 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4844.html CVE-2015-4844 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883. CVE-2015-4860 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4860.html CVE-2015-4860 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. CVE-2015-4871 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4871.html CVE-2015-4871 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security. CVE-2015-4872 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4872.html CVE-2015-4872 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835. CVE-2015-4881 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4881.html CVE-2015-4881 https://bugzilla.suse.com/951376 SUSE Bug 951376 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA. CVE-2015-4882 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4882.html CVE-2015-4882 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860. CVE-2015-4883 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4883.html CVE-2015-4883 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911. CVE-2015-4893 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4893.html CVE-2015-4893 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI. CVE-2015-4903 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4903.html CVE-2015-4903 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893. CVE-2015-4911 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-4911.html CVE-2015-4911 https://bugzilla.suse.com/951376 SUSE Bug 951376 https://bugzilla.suse.com/955131 SUSE Bug 955131 Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision. CVE-2015-7575 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-7575.html CVE-2015-7575 https://bugzilla.suse.com/959888 SUSE Bug 959888 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/960996 SUSE Bug 960996 https://bugzilla.suse.com/961280 SUSE Bug 961280 https://bugzilla.suse.com/961281 SUSE Bug 961281 https://bugzilla.suse.com/961282 SUSE Bug 961282 https://bugzilla.suse.com/961283 SUSE Bug 961283 https://bugzilla.suse.com/961284 SUSE Bug 961284 https://bugzilla.suse.com/961290 SUSE Bug 961290 https://bugzilla.suse.com/961357 SUSE Bug 961357 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 https://bugzilla.suse.com/967521 SUSE Bug 967521 https://bugzilla.suse.com/981087 SUSE Bug 981087 Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. CVE-2015-8126 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:L/AC:L/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-8126.html CVE-2015-8126 https://bugzilla.suse.com/954980 SUSE Bug 954980 https://bugzilla.suse.com/958198 SUSE Bug 958198 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 https://bugzilla.suse.com/969333 SUSE Bug 969333 Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. CVE-2015-8472 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2015-8472.html CVE-2015-8472 https://bugzilla.suse.com/954980 SUSE Bug 954980 https://bugzilla.suse.com/958198 SUSE Bug 958198 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/963937 SUSE Bug 963937 Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking. CVE-2016-0402 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0402.html CVE-2016-0402 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX. CVE-2016-0448 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 4 AV:N/AC:L/Au:S/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0448.html CVE-2016-0448 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP. CVE-2016-0466 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0466.html CVE-2016-0466 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data. CVE-2016-0483 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0483.html CVE-2016-0483 https://bugzilla.suse.com/960402 SUSE Bug 960402 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2016-0494 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0494.html CVE-2016-0494 https://bugzilla.suse.com/962743 SUSE Bug 962743 https://bugzilla.suse.com/963937 SUSE Bug 963937 Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component. CVE-2016-0636 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0636.html CVE-2016-0636 https://bugzilla.suse.com/972468 SUSE Bug 972468 https://bugzilla.suse.com/979252 SUSE Bug 979252 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization. CVE-2016-0686 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0686.html CVE-2016-0686 https://bugzilla.suse.com/976340 SUSE Bug 976340 https://bugzilla.suse.com/979252 SUSE Bug 979252 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component. CVE-2016-0687 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0687.html CVE-2016-0687 https://bugzilla.suse.com/976340 SUSE Bug 976340 https://bugzilla.suse.com/979252 SUSE Bug 979252 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security. CVE-2016-0695 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-0695.html CVE-2016-0695 https://bugzilla.suse.com/976340 SUSE Bug 976340 https://bugzilla.suse.com/979252 SUSE Bug 979252 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP. CVE-2016-3425 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3425.html CVE-2016-3425 https://bugzilla.suse.com/976340 SUSE Bug 976340 https://bugzilla.suse.com/979252 SUSE Bug 979252 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. CVE-2016-3427 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3427.html CVE-2016-3427 https://bugzilla.suse.com/1011805 SUSE Bug 1011805 https://bugzilla.suse.com/976340 SUSE Bug 976340 https://bugzilla.suse.com/979252 SUSE Bug 979252 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA. CVE-2016-3458 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3458.html CVE-2016-3458 https://bugzilla.suse.com/989732 SUSE Bug 989732 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking. CVE-2016-3485 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 low 1.2 AV:L/AC:H/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3485.html CVE-2016-3485 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 https://bugzilla.suse.com/989734 SUSE Bug 989734 Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX. CVE-2016-3498 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3498.html CVE-2016-3498 https://bugzilla.suse.com/989729 SUSE Bug 989729 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508. CVE-2016-3500 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3500.html CVE-2016-3500 https://bugzilla.suse.com/989730 SUSE Bug 989730 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install. CVE-2016-3503 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3503.html CVE-2016-3503 https://bugzilla.suse.com/989728 SUSE Bug 989728 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500. CVE-2016-3508 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3508.html CVE-2016-3508 https://bugzilla.suse.com/989731 SUSE Bug 989731 Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment. CVE-2016-3511 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3511.html CVE-2016-3511 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 https://bugzilla.suse.com/989727 SUSE Bug 989727 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot. CVE-2016-3550 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3550.html CVE-2016-3550 https://bugzilla.suse.com/989733 SUSE Bug 989733 Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610. CVE-2016-3598 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3598.html CVE-2016-3598 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 https://bugzilla.suse.com/989723 SUSE Bug 989723 Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot. CVE-2016-3606 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3606.html CVE-2016-3606 https://bugzilla.suse.com/989722 SUSE Bug 989722 Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598. CVE-2016-3610 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-3610.html CVE-2016-3610 https://bugzilla.suse.com/989725 SUSE Bug 989725 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries. CVE-2016-5542 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5542.html CVE-2016-5542 https://bugzilla.suse.com/1005522 SUSE Bug 1005522 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX. CVE-2016-5554 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5554.html CVE-2016-5554 https://bugzilla.suse.com/1005523 SUSE Bug 1005523 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. CVE-2016-5556 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5556.html CVE-2016-5556 https://bugzilla.suse.com/1005524 SUSE Bug 1005524 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. CVE-2016-5568 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5568.html CVE-2016-5568 https://bugzilla.suse.com/1005525 SUSE Bug 1005525 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582. CVE-2016-5573 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 important 7.1 AV:N/AC:H/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5573.html CVE-2016-5573 https://bugzilla.suse.com/1005526 SUSE Bug 1005526 https://bugzilla.suse.com/1009280 SUSE Bug 1009280 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573. CVE-2016-5582 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5582.html CVE-2016-5582 https://bugzilla.suse.com/1005527 SUSE Bug 1005527 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking. CVE-2016-5597 openSUSE Tumbleweed:java-1_7_0-openjdk-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-accessibility-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-demo-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-devel-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-headless-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-javadoc-1.7.0.121-1.1 openSUSE Tumbleweed:java-1_7_0-openjdk-src-1.7.0.121-1.1 moderate 5.4 AV:N/AC:H/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2016-5597.html CVE-2016-5597 https://bugzilla.suse.com/1005528 SUSE Bug 1005528 https://bugzilla.suse.com/1009280 SUSE Bug 1009280