Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2012-4681 (GCVE-0-2012-4681)
Vulnerability from cvelistv5
- n/a
CISA Known exploited vulnerability
Data from the Known Exploited Vulnerabilities Catalog
Date added: 2022-03-03
Due date: 2022-03-24
Required action: Apply updates per vendor instructions.
Used in ransomware: Known
Notes: https://nvd.nist.gov/vuln/detail/CVE-2012-4681
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T20:42:55.009Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html" }, { "name": "SUSE-SU-2012:1398", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" }, { "name": "SUSE-SU-2012:1231", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" }, { "name": "TA12-240A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "url": "http://www.us-cert.gov/cas/techalerts/TA12-240A.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/" }, { "name": "SSRT100970", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "name": "RHSA-2012:1225", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2012-1225.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html" }, { "name": "51044", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/51044" }, { "name": "HPSBUX02824", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "name": "55213", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/55213" } ], "title": "CVE Program Container" }, { "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" } }, { "other": { "content": { "id": "CVE-2012-4681", "options": [ { "Exploitation": "active" }, { "Automatable": "yes" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2025-02-10T20:02:21.664658Z", "version": "2.0.3" }, "type": "ssvc" } }, { "other": { "content": { "dateAdded": "2022-03-03", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4681" }, "type": "kev" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-284", "description": "CWE-284 Improper Access Control", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-02-10T20:03:29.529Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2012-08-26T00:00:00.000Z", "descriptions": [ { "lang": "en", "value": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2017-08-04T09:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html" }, { "name": "SUSE-SU-2012:1398", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" }, { "name": "SUSE-SU-2012:1231", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" }, { "name": "TA12-240A", "tags": [ "third-party-advisory", "x_refsource_CERT" ], "url": "http://www.us-cert.gov/cas/techalerts/TA12-240A.html" }, { "tags": [ "x_refsource_MISC" ], "url": "http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/" }, { "name": "SSRT100970", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "tags": [ "x_refsource_MISC" ], "url": "https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day" }, { "tags": [ "x_refsource_MISC" ], "url": "http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "name": "RHSA-2012:1225", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2012-1225.html" }, { "tags": [ "x_refsource_MISC" ], "url": "http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html" }, { "name": "51044", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/51044" }, { "name": "HPSBUX02824", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "name": "55213", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/55213" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-4681", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html", "refsource": "MISC", "url": "http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html" }, { "name": "SUSE-SU-2012:1398", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" }, { "name": "SUSE-SU-2012:1231", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" }, { "name": "TA12-240A", "refsource": "CERT", "url": "http://www.us-cert.gov/cas/techalerts/TA12-240A.html" }, { "name": "http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/", "refsource": "MISC", "url": "http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/" }, { "name": "SSRT100970", "refsource": "HP", "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "name": "https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day", "refsource": "MISC", "url": "https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day" }, { "name": "http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html", "refsource": "MISC", "url": "http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html" }, { "name": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "name": "RHSA-2012:1225", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2012-1225.html" }, { "name": "http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html", "refsource": "MISC", "url": "http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html" }, { "name": "51044", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/51044" }, { "name": "HPSBUX02824", "refsource": "HP", "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "name": "55213", "refsource": "BID", "url": "http://www.securityfocus.com/bid/55213" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-4681", "datePublished": "2012-08-28T00:00:00.000Z", "dateReserved": "2012-08-27T00:00:00.000Z", "dateUpdated": "2025-02-10T20:03:29.529Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "cisa_known_exploited": { "cveID": "CVE-2012-4681", "dateAdded": "2022-03-03", "dueDate": "2022-03-24", "knownRansomwareCampaignUse": "Known", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "product": "Java SE", "requiredAction": "Apply updates per vendor instructions.", "shortDescription": "The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.", "vendorProject": "Oracle", "vulnerabilityName": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability" }, "nvd": "{\"cve\":{\"id\":\"CVE-2012-4681\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2012-08-28T00:55:01.860\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \\\"reflection with a trusted immediate caller\\\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.\"},{\"lang\":\"es\",\"value\":\"Oracle Java 7 Update 6, y posiblemente otras versiones, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un applet manipulado, explotado como en la naturaleza, en agosto de 2012 utilizando Gondzz.class y Gondvv.class.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"cisaExploitAdd\":\"2022-03-03\",\"cisaActionDue\":\"2022-03-24\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A420DA5-1346-446B-8D23-E1E6DDBE527E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8CA8719-7ABE-4279-B49E-C414794A4FE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC92B7EC-849F-4255-9D55-43681B8DADC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update11:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ABC1045-7D3D-4A14-B994-7E60A4BB4C9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update12:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F3C1E65-929A-4468-8584-F086E6E59839\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update13:*:*:*:*:*:*\",\"matchCriteriaId\":\"42C95C1D-0C2E-4733-AB1B-65650D88995D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update14:*:*:*:*:*:*\",\"matchCriteriaId\":\"47A9F499-D1E3-41BD-AC18-E8D3D3231C12\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update15:*:*:*:*:*:*\",\"matchCriteriaId\":\"D45B0D7E-BA0F-4AAA-A7BA-2ADA4CC90D94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update16:*:*:*:*:*:*\",\"matchCriteriaId\":\"D58A3E4F-2409-440A-891E-0B84D79AB480\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update17:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FC2226B-CFEF-48A4-83EA-1F59F4AF7528\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update18:*:*:*:*:*:*\",\"matchCriteriaId\":\"F29DC78F-4D02-47B4-A955-32080B22356C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update19:*:*:*:*:*:*\",\"matchCriteriaId\":\"81A4204E-6F50-45FB-A343-7A30C0CD6D3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6E07069-D6EE-4D44-94A6-CDCA4A50E6F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update20:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B151882-47C0-400E-BBAB-A949E6140C86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update21:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DB4F19E-DFC4-42F4-87B9-32FB1C496649\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update22:*:*:*:*:*:*\",\"matchCriteriaId\":\"301E96A3-AD2F-48F3-9166-571BD6F9FAE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update23:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C9215D9-DB64-4CEE-85E6-E247035EFB09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update24:*:*:*:*:*:*\",\"matchCriteriaId\":\"352509FE-54D9-4A59-98B7-96E5E98BC2CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update25:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3EC13D3-4CE7-459C-A7D7-7D38C1284720\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update26:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CDCD1B4-C5F3-4188-B05F-23922F7DE517\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update27:*:*:*:*:*:*\",\"matchCriteriaId\":\"1824DA2D-26D5-4595-8376-8E41AB8C5E52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update29:*:*:*:*:*:*\",\"matchCriteriaId\":\"B72F78B7-10D1-49CF-AC4D-3B10921CB633\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update3:*:*:*:*:*:*\",\"matchCriteriaId\":\"344FA3EA-9E25-493C-976A-211D1404B251\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update30:*:*:*:*:*:*\",\"matchCriteriaId\":\"60D05860-9424-4727-B583-74A35BC9BDFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update31:*:*:*:*:*:*\",\"matchCriteriaId\":\"F85DB431-FEA4-42E7-AC29-6B66174DCD9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update32:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB7E911C-C780-440A-ABFF-CCE09061BB4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update33:*:*:*:*:*:*\",\"matchCriteriaId\":\"0381EE39-2F60-49FD-A63A-B9E81C9033CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update34:*:*:*:*:*:*\",\"matchCriteriaId\":\"9AD75455-B7F0-4F42-98E7-CAA43787D606\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D081A380-5AA4-4451-94A9-7B65810106E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update5:*:*:*:*:*:*\",\"matchCriteriaId\":\"112E7575-A3A0-4A94-AD39-7B2325B150B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update6:*:*:*:*:*:*\",\"matchCriteriaId\":\"708E8CEF-82EE-4D4B-ABF9-87AA4878F517\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update7:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5D9D9A7-8819-44A4-80AC-52D6B63A0C9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update8:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEB2C8A3-E0DC-46A3-BD82-8E45DA55ED0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update9:*:*:*:*:*:*\",\"matchCriteriaId\":\"64B5B16D-061A-438D-A8CF-9E63D6C748D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"ACABC935-5DD6-4F85-992E-70AD517EF41D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6152036D-6421-4AE4-9223-766FE07B5A44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D375CECB-405C-4E18-A7E8-9C5A2F97BD69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*\",\"matchCriteriaId\":\"52EEEA5A-E77C-43CF-A063-9D5C64EA1870\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*\",\"matchCriteriaId\":\"003746F6-DEF0-4D0F-AD97-9E335868E301\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF830E0E-0169-4B6A-81FF-2E9FCD7D913B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BAE3670-0938-480A-8472-DFF0B3A0D0BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB864346-1429-46B5-A91E-A1126C486421\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F199B346-B95E-4DCA-B750-148A36D559BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update10:*:*:*:*:*:*\",\"matchCriteriaId\":\"D16229B8-1642-4C10-8650-A9CEA9D4C98C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update11:*:*:*:*:*:*\",\"matchCriteriaId\":\"1714BDEF-6B0E-42BB-9510-3F9B52E170BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update12:*:*:*:*:*:*\",\"matchCriteriaId\":\"830A3A51-F17A-4C61-8F5C-6A4582A64DA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update13:*:*:*:*:*:*\",\"matchCriteriaId\":\"9DE0E496-719D-4CEF-837F-B060A898099F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update14:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B02F361-0C64-4CB8-8DAD-A63F1A9CC025\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update15:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD4CC3E2-7BEA-4D8C-811C-C5012327A9AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update16:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F63A8AC-893D-4D75-B467-85E70B62541D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update17:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7823AE6-CB18-47DE-8A4F-1F98394B7237\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update18:*:*:*:*:*:*\",\"matchCriteriaId\":\"381EFA43-DB73-48EA-A4B1-F451EF60D845\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update19:*:*:*:*:*:*\",\"matchCriteriaId\":\"77C54E00-0197-4C87-9BFF-01A099AC3006\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update2:*:*:*:*:*:*\",\"matchCriteriaId\":\"64AD6007-EB92-4D0E-A0CB-8FFDDB61AA6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update20:*:*:*:*:*:*\",\"matchCriteriaId\":\"7415177F-A2FE-47AB-8D92-194A4F6D75C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update21:*:*:*:*:*:*\",\"matchCriteriaId\":\"52FA600C-08B6-4143-9C72-DB31E489DE3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF13B96D-1F80-4672-8DA3-F86F6D3BF070\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1A2D440-D966-41A6-955D-38B28DDE0FDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1C57774-AD93-4162-8E45-92B09139C808\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD7C4194-D34A-418F-9B00-5C6012844AAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAF7D86B-1B4D-4E1F-9EF0-DA7E419D7E99\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0B82FB1-0F0E-44F9-87AE-628517279E4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0A67640-2F4A-488A-9D8F-3FE1F4DA8DEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update3:*:*:*:*:*:*\",\"matchCriteriaId\":\"2752B83A-6DD2-4829-9E4F-42CDDCBC38C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update30:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D60D98D-4363-44A0-AAB4-B61BA623EE21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update31:*:*:*:*:*:*\",\"matchCriteriaId\":\"23CDA4F0-C32B-4B08-A377-7D4426C2F569\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update32:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E76476E-4120-46A9-90A8-A95FE89636CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update33:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A84689-0CED-404F-8DC3-708BEB37D2CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update34:*:*:*:*:*:*\",\"matchCriteriaId\":\"738EC3E5-A4EB-47FE-9C9A-7C8E8C669765\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update4:*:*:*:*:*:*\",\"matchCriteriaId\":\"964CCFD6-316A-48C6-9A6B-7CFD1A1FB027\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update5:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC8771D7-9531-4A1D-B2DE-FAA7A7549801\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C59C275-5964-4E5D-BE80-BA4EA34BEA62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update7:*:*:*:*:*:*\",\"matchCriteriaId\":\"47C1922B-37E8-4009-97C7-B243F6F96704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update9:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B3A8681-3EAC-4D02-811A-5FCCCC7B5635\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFAA351A-93CD-46A8-A480-CE2783CCD620\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4B153FD-E20B-4909-8B10-884E48F5B590\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB106FA9-26CE-48C5-AEA5-FD1A5454AEE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*\",\"matchCriteriaId\":\"5831D70B-3854-4CB8-B88D-40F1743DAEE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEB101C9-CA38-4421-BC0C-C1AD47AA2CC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA302DF3-ABBB-4262-B206-4C0F7B5B1E91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A8EBCB-5E6A-42F0-8D07-F3A3D1C850F0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8382A145-CDD9-437E-9DE7-A349956778B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}]}]}],\"references\":[{\"url\":\"http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Exploit\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1225.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/51044\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"Broken Link\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/55213\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\",\"Broken Link\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA12-240A.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"Broken Link\"]},{\"url\":\"http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Exploit\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1225.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/51044\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"Broken Link\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/55213\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\",\"Broken Link\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA12-240A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"Broken Link\"]}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html\", \"name\": \"SUSE-SU-2012:1398\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html\", \"name\": \"SUSE-SU-2012:1231\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA12-240A.html\", \"name\": \"TA12-240A\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT\", \"x_transferred\"]}, {\"url\": \"http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\", \"name\": \"SSRT100970\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"]}, {\"url\": \"https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1225.html\", \"name\": \"RHSA-2012:1225\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://secunia.com/advisories/51044\", \"name\": \"51044\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\", \"name\": \"HPSBUX02824\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/55213\", \"name\": \"55213\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-06T20:42:55.009Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2012-4681\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-10T20:02:21.664658Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2022-03-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4681\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284 Improper Access Control\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-10T20:02:32.731Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2012-08-26T00:00:00.000Z\", \"references\": [{\"url\": \"http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html\", \"name\": \"SUSE-SU-2012:1398\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html\", \"name\": \"SUSE-SU-2012:1231\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA12-240A.html\", \"name\": \"TA12-240A\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT\"]}, {\"url\": \"http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\", \"name\": \"SSRT100970\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"]}, {\"url\": \"https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1225.html\", \"name\": \"RHSA-2012:1225\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://secunia.com/advisories/51044\", \"name\": \"51044\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\", \"name\": \"HPSBUX02824\", \"tags\": [\"vendor-advisory\", \"x_refsource_HP\"]}, {\"url\": \"http://www.securityfocus.com/bid/55213\", \"name\": \"55213\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \\\"reflection with a trusted immediate caller\\\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2017-08-04T09:57:01.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}, \"product_name\": \"n/a\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html\", \"name\": \"http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html\", \"refsource\": \"MISC\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html\", \"name\": \"SUSE-SU-2012:1398\", \"refsource\": \"SUSE\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html\", \"name\": \"SUSE-SU-2012:1231\", \"refsource\": \"SUSE\"}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA12-240A.html\", \"name\": \"TA12-240A\", \"refsource\": \"CERT\"}, {\"url\": \"http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/\", \"name\": \"http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/\", \"refsource\": \"MISC\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\", \"name\": \"SSRT100970\", \"refsource\": \"HP\"}, {\"url\": \"https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day\", \"name\": \"https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day\", \"refsource\": \"MISC\"}, {\"url\": \"http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html\", \"name\": \"http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html\", \"refsource\": \"MISC\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\", \"name\": \"http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2012-1225.html\", \"name\": \"RHSA-2012:1225\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html\", \"name\": \"http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html\", \"refsource\": \"MISC\"}, {\"url\": \"http://secunia.com/advisories/51044\", \"name\": \"51044\", \"refsource\": \"SECUNIA\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2\", \"name\": \"HPSBUX02824\", \"refsource\": \"HP\"}, {\"url\": \"http://www.securityfocus.com/bid/55213\", \"name\": \"55213\", \"refsource\": \"BID\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \\\"reflection with a trusted immediate caller\\\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2012-4681\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"cve@mitre.org\"}}}}", "cveMetadata": "{\"cveId\": \"CVE-2012-4681\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-10T20:03:29.529Z\", \"dateReserved\": \"2012-08-27T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2012-08-28T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
var-201208-0292
Vulnerability from variot
Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. Oracle Provided by Java 7 Any OS A vulnerability exists that allows the command to be executed. Oracle Provided by Java 7 Is Java Any sandbox is avoided OS A vulnerability exists that allows the command to be executed. Attack code using this vulnerability has been released and attacks have been observed.Crafted Java By opening a web page with an applet embedded, OS The command may be executed. Oracle Java Runtime Environment (JRE) is prone to a remote code execution vulnerability. An attacker can exploit this issue to bypass Java sandbox restrictions and load additional classes to execute arbitrary code in the context of the application. This vulnerability affects Oracle JRE 1.7.0 Update 6; prior versions may also be affected. An additional five fixes that had been previously planned for delivery are in this update. This distribution therefore completes the content for all originally planned fixes to be included in the Java SE Critical Patch Update for February 2013.
Both Java applets delivered via web browsers and stand-alone Java applications are affected, however web browsers using the Java plug-in are at particularly high risk.
The Java plug-in, the Java Deployment Toolkit plug-in, and Java Web Start can be used as attack vectors. An attacker could use social engineering techniques to entice a user to visit a link to a website hosting a malicious Java applet. An attacker could also compromise a legitimate website and upload a malicious Java applet (a "drive-by download" attack).
Reports indicate that at least one of these vulnerabilities is being actively exploited.
Stand-alone java applications may also be affected.
Disable Java in web browsers
These and previous Java vulnerabilities have been widely targeted by attackers, and new Java vulnerabilities are likely to be discovered. To defend against this and future Java vulnerabilities, consider disabling Java in web browsers until adequate updates have been installed. As with any software, unnecessary features should be disabled or removed as appropriate for your environment.
Starting with Java 7 Update 10, it is possible to disable Java content in web browsers through the Java control panel applet. From Setting the Security Level of the Java Client:
For installations where the highest level of security is required, it is possible to entirely prevent any Java apps (signed or unsigned) from running in a browser by de-selecting Enable Java content in the browser in the Java Control Panel under the Security tab.
Restrict access to Java applets
Network administrators unable to disable Java in web browsers may be able to help mitigate these and other Java vulnerabilities by restricting access to Java applets using a web proxy. Most web proxies have features that can be used to block or whitelist requests for .jar and .class files based on network location. Filtering requests that contain a Java User-Agent header may also be effective. For environments where Java is required on the local intranet, the proxy can be configured to allow access to Java applets hosted locally, but block access to Java applets on the internet.
References
-
Oracle Java SE Critical Patch Update Advisory Update - February 2013 http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html
-
Setting the Security Level of the Java Client http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/client-security.html
-
The Security Manager http://docs.oracle.com/javase/tutorial/essential/environment/security.html
-
How to disable the Java web plug-in in Safari https://support.apple.com/kb/HT5241
-
How to turn off Java applets https://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets
-
NoScript http://noscript.net/
-
Securing Your Web Browser https://www.us-cert.gov/reading_room/securing_browser/#Safari
-
Vulnerability Note VU#636312 http://www.kb.cert.org/vuls/id/636312#solution
Revision History
February 20, 2013: Initial release
Feedback can be directed to US-CERT Technical Staff. Please send email to cert@cert.org with "TA13-051A Feedback " in the subject.
Produced by US-CERT, a government organization. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c03533078
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c03533078 Version: 2
HPSBUX02824 SSRT100970 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
References: CVE-2012-0547, CVE-2012-1682, CVE-2012-3136, CVE-2012-4681
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. HP-UX B.11.23, and B.11.31 running HP JDK and JRE v7.0.02 and earlier
BACKGROUND
CVSS 2.0 Base Metrics
Reference Base Vector Base Score CVE-2012-0547 (AV:N/AC:L/Au:N/C:N/I:N/A:N) 0.0 CVE-2012-1682 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-3136 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 CVE-2012-4681 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002
RESOLUTION
HP has provided the following Java version upgrade to resolve these vulnerabilities. The upgrade is available from the following location
http://www.hp.com/go/java
HP-UX B.11.23, B.11.31 JDK and JRE v7.0.03 or subsequent
MANUAL ACTIONS: Yes - Update For Java v7.0 update to Java v7.0.03 or subsequent
PRODUCT SPECIFIC INFORMATION
HP-UX Software Assistant: HP-UX Software Assistant is an enhanced application that replaces HP-UX Security Patch Check. It analyzes all Security Bulletins issued by HP and lists recommended actions that may apply to a specific HP-UX system. It can also download patches and create a depot automatically. For more information see https://www.hp.com/go/swa
The following text is for use by the HP-UX Software Assistant.
AFFECTED VERSIONS
HP-UX B.11.23 HP-UX B.11.31 =========== Jdk70.JDK70 Jdk70.JDK70-COM Jdk70.JDK70-DEMO Jdk70.JDK70-IPF32 Jdk70.JDK70-IPF64 Jre70.JRE70 Jre70.JRE70-COM Jre70.JRE70-IPF32 Jre70.JRE70-IPF32-HS Jre70.JRE70-IPF64 Jre70.JRE70-IPF64-HS action: install revision 1.7.0.03.00 or subsequent
END AFFECTED VERSIONS
HISTORY Version:1 (rev.1) - 18 October 2012 Initial release Version:2 (rev.2) - 30 October 2012 Corrected CVE-2012-0547 typo
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HP Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hp.com.
Report: To report a potential security vulnerability with any HP supported product, send Email to: security-alert@hp.com
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via Email: http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins
Security Bulletin List: A list of HP Security Bulletins, updated periodically, is contained in HP Security Notice HPSN-2011-001: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c02964430
Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
3C = 3COM 3P = 3rd Party Software GN = HP General Software HF = HP Hardware and Firmware MP = MPE/iX MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PI = Printing and Imaging PV = ProCurve ST = Storage Software TU = Tru64 UNIX UX = HP-UX
Copyright 2012 Hewlett-Packard Development Company, L.P. Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities (CVE-2012-0547). The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFQTc2ymqjQ0CJFipgRAtdPAJ4okhZyCQ9BTpmAn4JPjXoPrVw9pACg4YXC RMZdy7VbZqL5+9SfkTIRYzg= =xDgA -----END PGP SIGNATURE-----
. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201401-30
http://security.gentoo.org/
Severity: High Title: Oracle JRE/JDK: Multiple vulnerabilities Date: January 27, 2014 Bugs: #404071, #421073, #433094, #438706, #451206, #455174, #458444, #460360, #466212, #473830, #473980, #488210, #498148 ID: 201401-30
Synopsis
Multiple vulnerabilities have been found in the Oracle JRE/JDK, allowing attackers to cause unspecified impact.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 dev-java/sun-jdk <= 1.6.0.45 Vulnerable! 2 dev-java/oracle-jdk-bin < 1.7.0.51 >= 1.7.0.51 * 3 dev-java/sun-jre-bin <= 1.6.0.45 Vulnerable! 4 dev-java/oracle-jre-bin < 1.7.0.51 >= 1.7.0.51 * 5 app-emulation/emul-linux-x86-java < 1.7.0.51 >= 1.7.0.51 * ------------------------------------------------------------------- NOTE: Certain packages are still vulnerable. Users should migrate to another package if one is available or wait for the existing packages to be marked stable by their architecture maintainers. ------------------------------------------------------------------- NOTE: Packages marked with asterisks require manual intervention! ------------------------------------------------------------------- 5 affected packages
Description
Multiple vulnerabilities have been reported in the Oracle Java implementation. Please review the CVE identifiers referenced below for details.
Workaround
There is no known workaround at this time.
Resolution
All Oracle JDK 1.7 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot -v ">=dev-java/oracle-jdk-bin-1.7.0.51"
All Oracle JRE 1.7 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot -v ">=dev-java/oracle-jre-bin-1.7.0.51"
All users of the precompiled 32-bit Oracle JRE should upgrade to the latest version:
# emerge --sync # emerge -a -1 -v ">=app-emulation/emul-linux-x86-java-1.7.0.51"
All Sun Microsystems JDK/JRE 1.6 users are suggested to upgrade to one of the newer Oracle packages like dev-java/oracle-jdk-bin or dev-java/oracle-jre-bin or choose another alternative we provide; eg. the IBM JDK/JRE or the open source IcedTea.
NOTE: As Oracle has revoked the DLJ license for its Java implementation, the packages can no longer be updated automatically.
References
[ 1 ] CVE-2011-3563 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3563 [ 2 ] CVE-2011-5035 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-5035 [ 3 ] CVE-2012-0497 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0497 [ 4 ] CVE-2012-0498 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0498 [ 5 ] CVE-2012-0499 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0499 [ 6 ] CVE-2012-0500 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0500 [ 7 ] CVE-2012-0501 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0501 [ 8 ] CVE-2012-0502 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0502 [ 9 ] CVE-2012-0503 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0503 [ 10 ] CVE-2012-0504 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0504 [ 11 ] CVE-2012-0505 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0505 [ 12 ] CVE-2012-0506 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0506 [ 13 ] CVE-2012-0507 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0507 [ 14 ] CVE-2012-0547 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0547 [ 15 ] CVE-2012-1531 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1531 [ 16 ] CVE-2012-1532 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1532 [ 17 ] CVE-2012-1533 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1533 [ 18 ] CVE-2012-1541 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1541 [ 19 ] CVE-2012-1682 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1682 [ 20 ] CVE-2012-1711 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1711 [ 21 ] CVE-2012-1713 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1713 [ 22 ] CVE-2012-1716 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1716 [ 23 ] CVE-2012-1717 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1717 [ 24 ] CVE-2012-1718 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1718 [ 25 ] CVE-2012-1719 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1719 [ 26 ] CVE-2012-1721 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1721 [ 27 ] CVE-2012-1722 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1722 [ 28 ] CVE-2012-1723 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1723 [ 29 ] CVE-2012-1724 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1724 [ 30 ] CVE-2012-1725 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1725 [ 31 ] CVE-2012-1726 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1726 [ 32 ] CVE-2012-3136 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3136 [ 33 ] CVE-2012-3143 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3143 [ 34 ] CVE-2012-3159 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3159 [ 35 ] CVE-2012-3174 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3174 [ 36 ] CVE-2012-3213 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3213 [ 37 ] CVE-2012-3216 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3216 [ 38 ] CVE-2012-3342 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3342 [ 39 ] CVE-2012-4416 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4416 [ 40 ] CVE-2012-4681 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4681 [ 41 ] CVE-2012-5067 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5067 [ 42 ] CVE-2012-5068 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5068 [ 43 ] CVE-2012-5069 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5069 [ 44 ] CVE-2012-5070 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5070 [ 45 ] CVE-2012-5071 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5071 [ 46 ] CVE-2012-5072 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5072 [ 47 ] CVE-2012-5073 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5073 [ 48 ] CVE-2012-5074 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5074 [ 49 ] CVE-2012-5075 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5075 [ 50 ] CVE-2012-5076 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5076 [ 51 ] CVE-2012-5077 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5077 [ 52 ] CVE-2012-5079 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5079 [ 53 ] CVE-2012-5081 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5081 [ 54 ] CVE-2012-5083 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5083 [ 55 ] CVE-2012-5084 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5084 [ 56 ] CVE-2012-5085 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5085 [ 57 ] CVE-2012-5086 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5086 [ 58 ] CVE-2012-5087 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5087 [ 59 ] CVE-2012-5088 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5088 [ 60 ] CVE-2012-5089 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5089 [ 61 ] CVE-2013-0169 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0169 [ 62 ] CVE-2013-0351 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0351 [ 63 ] CVE-2013-0401 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0401 [ 64 ] CVE-2013-0402 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0402 [ 65 ] CVE-2013-0409 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0409 [ 66 ] CVE-2013-0419 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0419 [ 67 ] CVE-2013-0422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0422 [ 68 ] CVE-2013-0423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0423 [ 69 ] CVE-2013-0430 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0430 [ 70 ] CVE-2013-0437 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0437 [ 71 ] CVE-2013-0438 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0438 [ 72 ] CVE-2013-0445 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0445 [ 73 ] CVE-2013-0446 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0446 [ 74 ] CVE-2013-0448 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0448 [ 75 ] CVE-2013-0449 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0449 [ 76 ] CVE-2013-0809 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0809 [ 77 ] CVE-2013-1473 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1473 [ 78 ] CVE-2013-1479 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1479 [ 79 ] CVE-2013-1481 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1481 [ 80 ] CVE-2013-1484 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1484 [ 81 ] CVE-2013-1485 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1485 [ 82 ] CVE-2013-1486 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1486 [ 83 ] CVE-2013-1487 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1487 [ 84 ] CVE-2013-1488 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1488 [ 85 ] CVE-2013-1491 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1491 [ 86 ] CVE-2013-1493 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1493 [ 87 ] CVE-2013-1500 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1500 [ 88 ] CVE-2013-1518 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1518 [ 89 ] CVE-2013-1537 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1537 [ 90 ] CVE-2013-1540 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1540 [ 91 ] CVE-2013-1557 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1557 [ 92 ] CVE-2013-1558 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1558 [ 93 ] CVE-2013-1561 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1561 [ 94 ] CVE-2013-1563 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1563 [ 95 ] CVE-2013-1564 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1564 [ 96 ] CVE-2013-1569 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1569 [ 97 ] CVE-2013-1571 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1571 [ 98 ] CVE-2013-2383 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2383 [ 99 ] CVE-2013-2384 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2384 [ 100 ] CVE-2013-2394 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2394 [ 101 ] CVE-2013-2400 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2400 [ 102 ] CVE-2013-2407 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2407 [ 103 ] CVE-2013-2412 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2412 [ 104 ] CVE-2013-2414 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2414 [ 105 ] CVE-2013-2415 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2415 [ 106 ] CVE-2013-2416 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2416 [ 107 ] CVE-2013-2417 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2417 [ 108 ] CVE-2013-2418 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2418 [ 109 ] CVE-2013-2419 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2419 [ 110 ] CVE-2013-2420 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2420 [ 111 ] CVE-2013-2421 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2421 [ 112 ] CVE-2013-2422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2422 [ 113 ] CVE-2013-2423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2423 [ 114 ] CVE-2013-2424 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2424 [ 115 ] CVE-2013-2425 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2425 [ 116 ] CVE-2013-2426 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2426 [ 117 ] CVE-2013-2427 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2427 [ 118 ] CVE-2013-2428 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2428 [ 119 ] CVE-2013-2429 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2429 [ 120 ] CVE-2013-2430 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2430 [ 121 ] CVE-2013-2431 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2431 [ 122 ] CVE-2013-2432 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2432 [ 123 ] CVE-2013-2433 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2433 [ 124 ] CVE-2013-2434 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2434 [ 125 ] CVE-2013-2435 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2435 [ 126 ] CVE-2013-2436 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2436 [ 127 ] CVE-2013-2437 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2437 [ 128 ] CVE-2013-2438 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2438 [ 129 ] CVE-2013-2439 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2439 [ 130 ] CVE-2013-2440 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2440 [ 131 ] CVE-2013-2442 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2442 [ 132 ] CVE-2013-2443 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2443 [ 133 ] CVE-2013-2444 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2444 [ 134 ] CVE-2013-2445 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2445 [ 135 ] CVE-2013-2446 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2446 [ 136 ] CVE-2013-2447 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2447 [ 137 ] CVE-2013-2448 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2448 [ 138 ] CVE-2013-2449 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2449 [ 139 ] CVE-2013-2450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2450 [ 140 ] CVE-2013-2451 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2451 [ 141 ] CVE-2013-2452 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2452 [ 142 ] CVE-2013-2453 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2453 [ 143 ] CVE-2013-2454 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2454 [ 144 ] CVE-2013-2455 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2455 [ 145 ] CVE-2013-2456 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2456 [ 146 ] CVE-2013-2457 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2457 [ 147 ] CVE-2013-2458 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2458 [ 148 ] CVE-2013-2459 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2459 [ 149 ] CVE-2013-2460 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2460 [ 150 ] CVE-2013-2461 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2461 [ 151 ] CVE-2013-2462 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2462 [ 152 ] CVE-2013-2463 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2463 [ 153 ] CVE-2013-2464 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2464 [ 154 ] CVE-2013-2465 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2465 [ 155 ] CVE-2013-2466 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2466 [ 156 ] CVE-2013-2467 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2467 [ 157 ] CVE-2013-2468 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2468 [ 158 ] CVE-2013-2469 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2469 [ 159 ] CVE-2013-2470 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2470 [ 160 ] CVE-2013-2471 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2471 [ 161 ] CVE-2013-2472 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2472 [ 162 ] CVE-2013-2473 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2473 [ 163 ] CVE-2013-3743 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3743 [ 164 ] CVE-2013-3744 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3744 [ 165 ] CVE-2013-3829 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3829 [ 166 ] CVE-2013-5772 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5772 [ 167 ] CVE-2013-5774 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5774 [ 168 ] CVE-2013-5775 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5775 [ 169 ] CVE-2013-5776 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5776 [ 170 ] CVE-2013-5777 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5777 [ 171 ] CVE-2013-5778 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5778 [ 172 ] CVE-2013-5780 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5780 [ 173 ] CVE-2013-5782 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5782 [ 174 ] CVE-2013-5783 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5783 [ 175 ] CVE-2013-5784 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5784 [ 176 ] CVE-2013-5787 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5787 [ 177 ] CVE-2013-5788 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5788 [ 178 ] CVE-2013-5789 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5789 [ 179 ] CVE-2013-5790 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5790 [ 180 ] CVE-2013-5797 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5797 [ 181 ] CVE-2013-5800 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5800 [ 182 ] CVE-2013-5801 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5801 [ 183 ] CVE-2013-5802 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5802 [ 184 ] CVE-2013-5803 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5803 [ 185 ] CVE-2013-5804 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5804 [ 186 ] CVE-2013-5805 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5805 [ 187 ] CVE-2013-5806 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5806 [ 188 ] CVE-2013-5809 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5809 [ 189 ] CVE-2013-5810 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5810 [ 190 ] CVE-2013-5812 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5812 [ 191 ] CVE-2013-5814 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5814 [ 192 ] CVE-2013-5817 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5817 [ 193 ] CVE-2013-5818 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5818 [ 194 ] CVE-2013-5819 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5819 [ 195 ] CVE-2013-5820 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5820 [ 196 ] CVE-2013-5823 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5823 [ 197 ] CVE-2013-5824 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5824 [ 198 ] CVE-2013-5825 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5825 [ 199 ] CVE-2013-5829 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5829 [ 200 ] CVE-2013-5830 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5830 [ 201 ] CVE-2013-5831 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5831 [ 202 ] CVE-2013-5832 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5832 [ 203 ] CVE-2013-5838 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5838 [ 204 ] CVE-2013-5840 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5840 [ 205 ] CVE-2013-5842 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5842 [ 206 ] CVE-2013-5843 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5843 [ 207 ] CVE-2013-5844 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5844 [ 208 ] CVE-2013-5846 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5846 [ 209 ] CVE-2013-5848 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5848 [ 210 ] CVE-2013-5849 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5849 [ 211 ] CVE-2013-5850 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5850 [ 212 ] CVE-2013-5851 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5851 [ 213 ] CVE-2013-5852 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5852 [ 214 ] CVE-2013-5854 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5854 [ 215 ] CVE-2013-5870 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5870 [ 216 ] CVE-2013-5878 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5878 [ 217 ] CVE-2013-5887 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5887 [ 218 ] CVE-2013-5888 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5888 [ 219 ] CVE-2013-5889 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5889 [ 220 ] CVE-2013-5893 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5893 [ 221 ] CVE-2013-5895 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5895 [ 222 ] CVE-2013-5896 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5896 [ 223 ] CVE-2013-5898 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5898 [ 224 ] CVE-2013-5899 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5899 [ 225 ] CVE-2013-5902 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5902 [ 226 ] CVE-2013-5904 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5904 [ 227 ] CVE-2013-5905 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5905 [ 228 ] CVE-2013-5906 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5906 [ 229 ] CVE-2013-5907 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5907 [ 230 ] CVE-2013-5910 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5910 [ 231 ] CVE-2014-0368 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0368 [ 232 ] CVE-2014-0373 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0373 [ 233 ] CVE-2014-0375 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0375 [ 234 ] CVE-2014-0376 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0376 [ 235 ] CVE-2014-0382 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0382 [ 236 ] CVE-2014-0385 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0385 [ 237 ] CVE-2014-0387 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0387 [ 238 ] CVE-2014-0403 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0403 [ 239 ] CVE-2014-0408 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0408 [ 240 ] CVE-2014-0410 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0410 [ 241 ] CVE-2014-0411 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0411 [ 242 ] CVE-2014-0415 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0415 [ 243 ] CVE-2014-0416 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0416 [ 244 ] CVE-2014-0417 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0417 [ 245 ] CVE-2014-0418 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0418 [ 246 ] CVE-2014-0422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0422 [ 247 ] CVE-2014-0423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0423 [ 248 ] CVE-2014-0424 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0424 [ 249 ] CVE-2014-0428 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0428
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201401-30.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2014 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Important: java-1.7.0-openjdk security update Advisory ID: RHSA-2012:1223-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2012-1223.html Issue date: 2012-09-03 CVE Names: CVE-2012-0547 CVE-2012-1682 CVE-2012-3136 CVE-2012-4681 =====================================================================
- Summary:
Updated java-1.7.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, noarch, x86_64
- Description:
These packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit.
Multiple improper permission check issues were discovered in the Beans component in OpenJDK. (CVE-2012-0547)
All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.
- Solution:
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
- Bugs fixed (http://bugzilla.redhat.com/):
852051 - CVE-2012-4681 OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473) 853097 - CVE-2012-1682 OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476) 853138 - CVE-2012-3136 OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567) 853228 - CVE-2012-0547 OpenJDK: AWT hardening fixes (AWT, 7163201)
- Package List:
Red Hat Enterprise Linux Desktop (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
i386: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm
x86_64: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
Red Hat Enterprise Linux Desktop Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
i386: java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.i686.rpm
noarch: java-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm
x86_64: java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
Red Hat Enterprise Linux HPC Node Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6ComputeNode/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
noarch: java-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm
x86_64: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
i386: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm
x86_64: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
i386: java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.i686.rpm
noarch: java-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm
x86_64: java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
i386: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm
x86_64: java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm
i386: java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.i686.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.i686.rpm
noarch: java-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm
x86_64: java-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm java-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package
- References:
https://www.redhat.com/security/data/cve/CVE-2012-0547.html https://www.redhat.com/security/data/cve/CVE-2012-1682.html https://www.redhat.com/security/data/cve/CVE-2012-3136.html https://www.redhat.com/security/data/cve/CVE-2012-4681.html https://access.redhat.com/security/updates/classification/#important http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2012 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFQRKzHXlSAg2UNWIIRAt9QAJ9qt+dYZrGWLZfelO3gxXIHLRIrjgCdE0e8 0vzPqUIZfBkT+eNBNebUuVE= =WYyS -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201208-0292", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "jre", "scope": "eq", "trust": 1.6, "vendor": "oracle", "version": "1.6.0" }, { "model": "jdk", "scope": "eq", "trust": 1.6, "vendor": "oracle", "version": "1.6.0" }, { "model": "jre", "scope": "eq", "trust": 1.0, "vendor": "oracle", "version": "1.7.0" }, { "model": "enterprise linux desktop", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "6.0" }, { "model": "enterprise linux server", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "6.0" }, { "model": "enterprise linux eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "6.3" }, { "model": "enterprise linux workstation", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "6.0" }, { "model": "jdk", "scope": "eq", "trust": 1.0, "vendor": "oracle", "version": "1.7.0" }, { "model": "linux enterprise server for vmware sp2", "scope": "eq", "trust": 0.9, "vendor": "suse", "version": "11" }, { "model": "linux enterprise server sp2", "scope": "eq", "trust": 0.9, "vendor": "suse", "version": "11" }, { "model": "enterprise linux", "scope": "eq", "trust": 0.9, "vendor": "oracle", "version": "6.2" }, { "model": "enterprise linux", "scope": "eq", "trust": 0.9, "vendor": "oracle", "version": "6" }, { "model": "java se sr1", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "7" }, { "model": "hp-ux b.11.31", "scope": null, "trust": 0.9, "vendor": "hp", "version": null }, { "model": "linux", "scope": null, "trust": 0.9, "vendor": "gentoo", "version": null }, { "model": "proactive contact", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "5.0" }, { "model": "meeting exchange", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "5.0" }, { "model": "iq", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "5" }, { "model": "iq", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "4.0" }, { "model": "ip office application server", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "8.0" }, { "model": "aura system manager", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0" }, { "model": "aura sip enablement services", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "5.0" }, { "model": "aura presence services", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0" }, { "model": "aura messaging", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0" }, { "model": "aura conferencing sp1 standard", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0" }, { "model": "aura communication manager utility services", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0" }, { "model": "aura communication manager", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0.1" }, { "model": "aura communication manager", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "6.0" }, { "model": "aura application server sip core", "scope": "eq", "trust": 0.9, "vendor": "avaya", "version": "53002.0" }, { "model": "jdk", "scope": "lte", "trust": 0.8, "vendor": "oracle", "version": "6 update 34" }, { "model": "jdk", "scope": "lte", "trust": 0.8, "vendor": "oracle", "version": "7 update 6" }, { "model": "jre", "scope": "lte", "trust": 0.8, "vendor": "oracle", "version": "6 update 34" }, { "model": "jre", "scope": "lte", "trust": 0.8, "vendor": "oracle", "version": "7 update 6" }, { "model": "jdk", "scope": "lte", "trust": 0.8, "vendor": "sun microsystems", "version": "6 update 21" }, { "model": "jre", "scope": "lte", "trust": 0.8, "vendor": "sun microsystems", "version": "6 update 21" }, { "model": "secureware/ electronic signature development kit", "scope": "eq", "trust": 0.8, "vendor": "nec", "version": "v1.3" }, { "model": "hat enterprise linux workstation supplementary", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux workstation optional", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux workstation", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux server supplementary", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux server optional", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux server", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux hpc node supplementary", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux hpc node optional", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux desktop supplementary", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux desktop optional", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux desktop", "scope": "eq", "trust": 0.6, "vendor": "red", "version": "6" }, { "model": "vcenter update manager", "scope": "eq", "trust": 0.3, "vendor": "vmware", "version": "5.1" }, { "model": "vcenter update manager", "scope": "eq", "trust": 0.3, "vendor": "vmware", "version": "5.0" }, { "model": "vcenter server", "scope": "eq", "trust": 0.3, "vendor": "vmware", "version": "5.0" }, { "model": "vcenter server", "scope": "eq", "trust": 0.3, "vendor": "vmware", "version": "4.1" }, { "model": "esx", "scope": "eq", "trust": 0.3, "vendor": "vmware", "version": "4.1" }, { "model": "linux enterprise java sp2", "scope": "eq", "trust": 0.3, "vendor": "suse", "version": "11" }, { "model": "linux enterprise software development kit sp2", "scope": "eq", "trust": 0.3, "vendor": "suse", "version": "11" }, { "model": "trio tview software", "scope": "eq", "trust": 0.3, "vendor": "schneider electric", "version": "3.27.0" }, { "model": "enterprise linux workstation supplementary", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux workstation optional", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux workstation", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux server supplementary", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux server optional", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux server", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux hpc node supplementary", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux hpc node optional", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux desktop supplementary", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux desktop optional", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "enterprise linux desktop", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "6" }, { "model": "jre update", "scope": "eq", "trust": 0.3, "vendor": "oracle", "version": "1.76" }, { "model": "jre update", "scope": "eq", "trust": 0.3, "vendor": "oracle", "version": "1.6.034" }, { "model": "openjdk", "scope": "eq", "trust": 0.3, "vendor": "openjdk", "version": "0" }, { "model": "jre", "scope": "eq", "trust": 0.3, "vendor": "openjdk", "version": "1.7" }, { "model": "icedtea", "scope": "eq", "trust": 0.3, "vendor": "icedtea", "version": "2.3.0" }, { "model": "icedtea", "scope": "eq", "trust": 0.3, "vendor": "icedtea", "version": "2.2" }, { "model": "icedtea", "scope": "eq", "trust": 0.3, "vendor": "icedtea", "version": "2.1" }, { "model": "java sdk sr1", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "7" }, { "model": "jdk and jre", "scope": "eq", "trust": 0.3, "vendor": "hp", "version": "7.0.2" }, { "model": "messaging application server", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "5.0" }, { "model": "call management system r16.3", "scope": null, "trust": 0.3, "vendor": "avaya", "version": null }, { "model": "call management system r16.2", "scope": null, "trust": 0.3, "vendor": "avaya", "version": null }, { "model": "call management system r16.1", "scope": null, "trust": 0.3, "vendor": "avaya", "version": null }, { "model": "call management system r", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "16" }, { "model": "call management system r", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "15" }, { "model": "aura communication manager", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "6.2" }, { "model": "aura communication manager sp2", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "5.2.1" }, { "model": "aura application server sip core", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "53003.0" }, { "model": "vcenter server update", "scope": "ne", "trust": 0.3, "vendor": "vmware", "version": "5.11" }, { "model": "update manager update", "scope": "ne", "trust": 0.3, "vendor": "vmware", "version": "5.11" }, { "model": "trio tview software", "scope": "ne", "trust": 0.3, "vendor": "schneider electric", "version": "3.29.0" }, { "model": "jre update", "scope": "ne", "trust": 0.3, "vendor": "oracle", "version": "1.77" }, { "model": "jre update", "scope": "ne", "trust": 0.3, "vendor": "oracle", "version": "1.6.035" }, { "model": "icedtea", "scope": "ne", "trust": 0.3, "vendor": "icedtea", "version": "2.3.1" }, { "model": "java se sr2", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "7" }, { "model": "java sdk sr2", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "7" }, { "model": "jdk and jre", "scope": "ne", "trust": 0.3, "vendor": "hp", "version": "7.0.3" }, { "model": "linux lts i386", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "12.04" }, { "model": "linux lts amd64", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "12.04" }, { "model": "linux i386", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "11.10" }, { "model": "linux amd64", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "11.10" }, { "model": "linux powerpc", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "11.04" }, { "model": "linux i386", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "11.04" }, { "model": "linux arm", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "11.04" }, { "model": "linux amd64", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "11.04" }, { "model": "linux sparc", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "10.04" }, { "model": "linux powerpc", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "10.04" }, { "model": "linux i386", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "10.04" }, { "model": "linux arm", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "10.04" }, { "model": "linux amd64", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "10.04" }, { "model": "linux enterprise desktop sp2", "scope": "eq", "trust": 0.3, "vendor": "suse", "version": "11" }, { "model": "opensuse", "scope": "eq", "trust": 0.3, "vendor": "suse", "version": "12.1" }, { "model": "opensuse", "scope": "eq", "trust": 0.3, "vendor": "suse", "version": "11.4" }, { "model": "hat enterprise linux supplementary server", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "5" }, { "model": "hat enterprise linux hpc node", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "6" }, { "model": "hat enterprise linux desktop supplementary client", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "5" }, { "model": "hat enterprise linux desktop client", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "5" }, { "model": "hat enterprise linux server", "scope": "eq", "trust": 0.3, "vendor": "red", "version": "5" }, { "model": "enterprise linux", "scope": "eq", "trust": 0.3, "vendor": "oracle", "version": "5" }, { "model": "linux mandrake x86 64", "scope": "eq", "trust": 0.3, "vendor": "mandriva", "version": "2011" }, { "model": "linux mandrake", "scope": "eq", "trust": 0.3, "vendor": "mandriva", "version": "2011" }, { "model": "enterprise server x86 64", "scope": "eq", "trust": 0.3, "vendor": "mandrakesoft", "version": "5" }, { "model": "enterprise server", "scope": "eq", "trust": 0.3, "vendor": "mandrakesoft", "version": "5" }, { "model": "centos", "scope": "eq", "trust": 0.3, "vendor": "centos", "version": "6" }, { "model": "centos", "scope": "eq", "trust": 0.3, "vendor": "centos", "version": "5" }, { "model": "aura experience portal", "scope": "eq", "trust": 0.3, "vendor": "avaya", "version": "6.0" } ], "sources": [ { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "db": "CNNVD", "id": "CNNVD-201208-570" }, { "db": "NVD", "id": "CVE-2012-4681" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:oracle:jdk", "vulnerable": true }, { "cpe22Uri": "cpe:/a:oracle:jre", "vulnerable": true }, { "cpe22Uri": "cpe:/a:sun:jdk", "vulnerable": true }, { "cpe22Uri": "cpe:/a:sun:jre", "vulnerable": true }, { "cpe22Uri": "cpe:/a:nec:secureware_digital_signature_development_kit", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2012-003918" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "James Forshaw (tyranid) (via TippingPoint) and Adam Gowdiak of Security Explorations", "sources": [ { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" } ], "trust": 0.6 }, "cve": "CVE-2012-4681", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "id": "CVE-2012-4681", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 1.1, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Medium", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Partial", "baseScore": 6.8, "confidentialityImpact": "Partial", "exploitabilityScore": null, "id": "CVE-2012-4681", "impactScore": null, "integrityImpact": "Partial", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "Medium", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2012-4681", "trust": 1.0, "value": "HIGH" }, { "author": "NVD", "id": "CVE-2012-4681", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201208-570", "trust": 0.6, "value": "CRITICAL" }, { "author": "VULMON", "id": "CVE-2012-4681", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "VULMON", "id": "CVE-2012-4681" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "db": "CNNVD", "id": "CNNVD-201208-570" }, { "db": "NVD", "id": "CVE-2012-4681" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. Oracle Provided by Java 7 Any OS A vulnerability exists that allows the command to be executed. Oracle Provided by Java 7 Is Java Any sandbox is avoided OS A vulnerability exists that allows the command to be executed. Attack code using this vulnerability has been released and attacks have been observed.Crafted Java By opening a web page with an applet embedded, OS The command may be executed. Oracle Java Runtime Environment (JRE) is prone to a remote code execution vulnerability. \nAn attacker can exploit this issue to bypass Java sandbox restrictions and load additional classes to execute arbitrary code in the context of the application. \nThis vulnerability affects Oracle JRE 1.7.0 Update 6; prior versions may also be affected. An additional five fixes that had been\n previously planned for delivery are in this update. This\n distribution therefore completes the content for all originally\n planned fixes to be included in the Java SE Critical Patch Update\n for February 2013. \n\n Both Java applets delivered via web browsers and stand-alone Java\n applications are affected, however web browsers using the Java\n plug-in are at particularly high risk. \n\n The Java plug-in, the Java Deployment Toolkit plug-in, and Java Web\n Start can be used as attack vectors. An attacker could use social\n engineering techniques to entice a user to visit a link to a\n website hosting a malicious Java applet. An attacker could also\n compromise a legitimate website and upload a malicious Java applet\n (a \"drive-by download\" attack). \n\n Reports indicate that at least one of these vulnerabilities is\n being actively exploited. \n\n Stand-alone java applications may also be affected. \n\n Disable Java in web browsers\n\n These and previous Java vulnerabilities have been widely targeted\n by attackers, and new Java vulnerabilities are likely to be\n discovered. To defend against this and future Java vulnerabilities,\n consider disabling Java in web browsers until adequate updates have\n been installed. As with any software, unnecessary features should\n be disabled or removed as appropriate for your environment. \n\n Starting with Java 7 Update 10, it is possible to disable Java\n content in web browsers through the Java control panel applet. From\n Setting the Security Level of the Java Client:\n\n For installations where the highest level of security is required,\n it is possible to entirely prevent any Java apps (signed or\n unsigned) from running in a browser by de-selecting Enable Java\n content in the browser in the Java Control Panel under the Security\n tab. \n\n Restrict access to Java applets\n\n Network administrators unable to disable Java in web browsers may\n be able to help mitigate these and other Java vulnerabilities by\n restricting access to Java applets using a web proxy. Most web\n proxies have features that can be used to block or whitelist\n requests for .jar and .class files based on network location. \n Filtering requests that contain a Java User-Agent header may also\n be effective. For environments where Java is required on the local\n intranet, the proxy can be configured to allow access to Java\n applets hosted locally, but block access to Java applets on the\n internet. \n\n\nReferences\n\n * Oracle Java SE Critical Patch Update Advisory Update - February\n 2013\n \u003chttp://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html\u003e\n\n * Setting the Security Level of the Java Client\n \u003chttp://docs.oracle.com/javase/7/docs/technotes/guides/jweb/client-security.html\u003e\n\n * The Security Manager\n \u003chttp://docs.oracle.com/javase/tutorial/essential/environment/security.html\u003e\n\n * How to disable the Java web plug-in in Safari\n \u003chttps://support.apple.com/kb/HT5241\u003e\n\n * How to turn off Java applets\n \u003chttps://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets\u003e\n\n * NoScript\n \u003chttp://noscript.net/\u003e\n\n * Securing Your Web Browser\n \u003chttps://www.us-cert.gov/reading_room/securing_browser/#Safari\u003e\n\n * Vulnerability Note VU#636312\n \u003chttp://www.kb.cert.org/vuls/id/636312#solution\u003e\n\n\nRevision History\n\n February 20, 2013: Initial release\n\n ____________________________________________________________________\n\n Feedback can be directed to US-CERT Technical Staff. Please send\n email to \u003ccert@cert.org\u003e with \"TA13-051A Feedback \" in\n the subject. \n ____________________________________________________________________\n\n Produced by US-CERT, a government organization. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nNote: the current version of the following document is available here:\nhttps://h20566.www2.hp.com/portal/site/hpsc/public/kb/\ndocDisplay?docId=emr_na-c03533078\n\nSUPPORT COMMUNICATION - SECURITY BULLETIN\n\nDocument ID: c03533078\nVersion: 2\n\nHPSBUX02824 SSRT100970 rev.2 - HP-UX Running Java, Remote Execution of\nArbitrary Code, and Other Vulnerabilities\n\nNOTICE: The information in this Security Bulletin should be acted upon as\nsoon as possible. \n\nReferences: CVE-2012-0547, CVE-2012-1682, CVE-2012-3136, CVE-2012-4681\n\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. \nHP-UX B.11.23, and B.11.31 running HP JDK and JRE v7.0.02 and earlier\n\nBACKGROUND\n\nCVSS 2.0 Base Metrics\n===========================================================\n Reference Base Vector Base Score\nCVE-2012-0547 (AV:N/AC:L/Au:N/C:N/I:N/A:N) 0.0\nCVE-2012-1682 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0\nCVE-2012-3136 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0\nCVE-2012-4681 (AV:N/AC:L/Au:N/C:C/I:C/A:C) 10.0\n===========================================================\n Information on CVSS is documented\n in HP Customer Notice: HPSN-2008-002\n\nRESOLUTION\n\nHP has provided the following Java version upgrade to resolve these\nvulnerabilities. \nThe upgrade is available from the following location\n\nhttp://www.hp.com/go/java\n\nHP-UX B.11.23, B.11.31\n JDK and JRE v7.0.03 or subsequent\n\nMANUAL ACTIONS: Yes - Update\nFor Java v7.0 update to Java v7.0.03 or subsequent\n\nPRODUCT SPECIFIC INFORMATION\n\nHP-UX Software Assistant: HP-UX Software Assistant is an enhanced application\nthat replaces HP-UX Security Patch Check. It analyzes all Security Bulletins\nissued by HP and lists recommended actions that may apply to a specific HP-UX\nsystem. It can also download patches and create a depot automatically. For\nmore information see https://www.hp.com/go/swa\n\nThe following text is for use by the HP-UX Software Assistant. \n\nAFFECTED VERSIONS\n\nHP-UX B.11.23\nHP-UX B.11.31\n===========\nJdk70.JDK70\nJdk70.JDK70-COM\nJdk70.JDK70-DEMO\nJdk70.JDK70-IPF32\nJdk70.JDK70-IPF64\nJre70.JRE70\nJre70.JRE70-COM\nJre70.JRE70-IPF32\nJre70.JRE70-IPF32-HS\nJre70.JRE70-IPF64\nJre70.JRE70-IPF64-HS\naction: install revision 1.7.0.03.00 or subsequent\n\nEND AFFECTED VERSIONS\n\nHISTORY\nVersion:1 (rev.1) - 18 October 2012 Initial release\nVersion:2 (rev.2) - 30 October 2012 Corrected CVE-2012-0547 typo\n\nThird Party Security Patches: Third party security patches that are to be\ninstalled on systems running HP software products should be applied in\naccordance with the customer\u0027s patch management policy. \n\nSupport: For issues about implementing the recommendations of this Security\nBulletin, contact normal HP Services support channel. For other issues about\nthe content of this Security Bulletin, send e-mail to security-alert@hp.com. \n\nReport: To report a potential security vulnerability with any HP supported\nproduct, send Email to: security-alert@hp.com\n\nSubscribe: To initiate a subscription to receive future HP Security Bulletin\nalerts via Email:\nhttp://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins\n\nSecurity Bulletin List: A list of HP Security Bulletins, updated\nperiodically, is contained in HP Security Notice HPSN-2011-001:\nhttps://h20566.www2.hp.com/portal/site/hpsc/public/kb/\ndocDisplay?docId=emr_na-c02964430\n\nSecurity Bulletin Archive: A list of recently released Security Bulletins is\navailable here:\nhttp://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/\n\nSoftware Product Category: The Software Product Category is represented in\nthe title by the two characters following HPSB. \n\n3C = 3COM\n3P = 3rd Party Software\nGN = HP General Software\nHF = HP Hardware and Firmware\nMP = MPE/iX\nMU = Multi-Platform Software\nNS = NonStop Servers\nOV = OpenVMS\nPI = Printing and Imaging\nPV = ProCurve\nST = Storage Software\nTU = Tru64 UNIX\nUX = HP-UX\n\nCopyright 2012 Hewlett-Packard Development Company, L.P. \nHewlett-Packard Company shall not be liable for technical or editorial errors\nor omissions contained herein. The information provided is provided \"as is\"\nwithout warranty of any kind. To the extent permitted by law, neither HP or\nits affiliates, subcontractors or suppliers will be liable for\nincidental,special or consequential damages including downtime cost; lost\nprofits;damages relating to the procurement of substitute products or\nservices; or damages for loss of data, or software restoration. The\ninformation in this document is subject to change without notice. \nHewlett-Packard Company and the names of Hewlett-Packard products referenced\nherein are trademarks of Hewlett-Packard Company in the United States and\nother countries. Other product and company names mentioned herein may be\ntrademarks of their respective owners. NOTE: this identifier was assigned by the Oracle\n CNA, but CVE is not intended to cover defense-in-depth issues that are\n only exposed by the presence of other vulnerabilities (CVE-2012-0547). The verification\n of md5 checksums and GPG signatures is performed automatically for you. \n\n All packages are signed by Mandriva for security. You can obtain the\n GPG public key of the Mandriva Security Team by executing:\n\n gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98\n\n You can view other update advisories for Mandriva Linux at:\n\n http://www.mandriva.com/security/advisories\n\n If you want to report vulnerabilities, please contact\n\n security_(at)_mandriva.com\n _______________________________________________________________________\n\n Type Bits/KeyID Date User ID\n pub 1024D/22458A98 2000-07-10 Mandriva Security Team\n \u003csecurity*mandriva.com\u003e\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.11 (GNU/Linux)\n\niD8DBQFQTc2ymqjQ0CJFipgRAtdPAJ4okhZyCQ9BTpmAn4JPjXoPrVw9pACg4YXC\nRMZdy7VbZqL5+9SfkTIRYzg=\n=xDgA\n-----END PGP SIGNATURE-----\n\n\n. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201401-30\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: High\n Title: Oracle JRE/JDK: Multiple vulnerabilities\n Date: January 27, 2014\n Bugs: #404071, #421073, #433094, #438706, #451206, #455174,\n #458444, #460360, #466212, #473830, #473980, #488210, #498148\n ID: 201401-30\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in the Oracle JRE/JDK,\nallowing attackers to cause unspecified impact. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 dev-java/sun-jdk \u003c= 1.6.0.45 Vulnerable!\n 2 dev-java/oracle-jdk-bin \u003c 1.7.0.51 \u003e= 1.7.0.51 *\n 3 dev-java/sun-jre-bin \u003c= 1.6.0.45 Vulnerable!\n 4 dev-java/oracle-jre-bin \u003c 1.7.0.51 \u003e= 1.7.0.51 *\n 5 app-emulation/emul-linux-x86-java\n \u003c 1.7.0.51 \u003e= 1.7.0.51 *\n -------------------------------------------------------------------\n NOTE: Certain packages are still vulnerable. Users should migrate\n to another package if one is available or wait for the\n existing packages to be marked stable by their\n architecture maintainers. \n -------------------------------------------------------------------\n NOTE: Packages marked with asterisks require manual intervention!\n -------------------------------------------------------------------\n 5 affected packages\n\nDescription\n===========\n\nMultiple vulnerabilities have been reported in the Oracle Java\nimplementation. Please review the CVE identifiers referenced below for\ndetails. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Oracle JDK 1.7 users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot -v \"\u003e=dev-java/oracle-jdk-bin-1.7.0.51\"\n\nAll Oracle JRE 1.7 users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot -v \"\u003e=dev-java/oracle-jre-bin-1.7.0.51\"\n\nAll users of the precompiled 32-bit Oracle JRE should upgrade to the\nlatest version:\n\n # emerge --sync\n # emerge -a -1 -v \"\u003e=app-emulation/emul-linux-x86-java-1.7.0.51\"\n\nAll Sun Microsystems JDK/JRE 1.6 users are suggested to upgrade to one\nof the newer Oracle packages like dev-java/oracle-jdk-bin or\ndev-java/oracle-jre-bin or choose another alternative we provide; eg. \nthe IBM JDK/JRE or the open source IcedTea. \n\nNOTE: As Oracle has revoked the DLJ license for its Java\nimplementation, the packages can no longer be updated automatically. \n\nReferences\n==========\n\n[ 1 ] CVE-2011-3563\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3563\n[ 2 ] CVE-2011-5035\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-5035\n[ 3 ] CVE-2012-0497\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0497\n[ 4 ] CVE-2012-0498\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0498\n[ 5 ] CVE-2012-0499\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0499\n[ 6 ] CVE-2012-0500\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0500\n[ 7 ] CVE-2012-0501\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0501\n[ 8 ] CVE-2012-0502\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0502\n[ 9 ] CVE-2012-0503\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0503\n[ 10 ] CVE-2012-0504\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0504\n[ 11 ] CVE-2012-0505\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0505\n[ 12 ] CVE-2012-0506\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0506\n[ 13 ] CVE-2012-0507\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0507\n[ 14 ] CVE-2012-0547\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0547\n[ 15 ] CVE-2012-1531\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1531\n[ 16 ] CVE-2012-1532\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1532\n[ 17 ] CVE-2012-1533\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1533\n[ 18 ] CVE-2012-1541\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1541\n[ 19 ] CVE-2012-1682\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1682\n[ 20 ] CVE-2012-1711\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1711\n[ 21 ] CVE-2012-1713\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1713\n[ 22 ] CVE-2012-1716\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1716\n[ 23 ] CVE-2012-1717\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1717\n[ 24 ] CVE-2012-1718\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1718\n[ 25 ] CVE-2012-1719\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1719\n[ 26 ] CVE-2012-1721\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1721\n[ 27 ] CVE-2012-1722\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1722\n[ 28 ] CVE-2012-1723\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1723\n[ 29 ] CVE-2012-1724\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1724\n[ 30 ] CVE-2012-1725\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1725\n[ 31 ] CVE-2012-1726\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1726\n[ 32 ] CVE-2012-3136\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3136\n[ 33 ] CVE-2012-3143\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3143\n[ 34 ] CVE-2012-3159\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3159\n[ 35 ] CVE-2012-3174\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3174\n[ 36 ] CVE-2012-3213\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3213\n[ 37 ] CVE-2012-3216\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3216\n[ 38 ] CVE-2012-3342\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3342\n[ 39 ] CVE-2012-4416\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4416\n[ 40 ] CVE-2012-4681\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4681\n[ 41 ] CVE-2012-5067\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5067\n[ 42 ] CVE-2012-5068\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5068\n[ 43 ] CVE-2012-5069\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5069\n[ 44 ] CVE-2012-5070\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5070\n[ 45 ] CVE-2012-5071\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5071\n[ 46 ] CVE-2012-5072\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5072\n[ 47 ] CVE-2012-5073\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5073\n[ 48 ] CVE-2012-5074\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5074\n[ 49 ] CVE-2012-5075\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5075\n[ 50 ] CVE-2012-5076\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5076\n[ 51 ] CVE-2012-5077\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5077\n[ 52 ] CVE-2012-5079\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5079\n[ 53 ] CVE-2012-5081\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5081\n[ 54 ] CVE-2012-5083\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5083\n[ 55 ] CVE-2012-5084\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5084\n[ 56 ] CVE-2012-5085\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5085\n[ 57 ] CVE-2012-5086\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5086\n[ 58 ] CVE-2012-5087\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5087\n[ 59 ] CVE-2012-5088\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5088\n[ 60 ] CVE-2012-5089\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5089\n[ 61 ] CVE-2013-0169\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0169\n[ 62 ] CVE-2013-0351\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0351\n[ 63 ] CVE-2013-0401\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0401\n[ 64 ] CVE-2013-0402\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0402\n[ 65 ] CVE-2013-0409\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0409\n[ 66 ] CVE-2013-0419\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0419\n[ 67 ] CVE-2013-0422\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0422\n[ 68 ] CVE-2013-0423\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0423\n[ 69 ] CVE-2013-0430\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0430\n[ 70 ] CVE-2013-0437\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0437\n[ 71 ] CVE-2013-0438\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0438\n[ 72 ] CVE-2013-0445\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0445\n[ 73 ] CVE-2013-0446\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0446\n[ 74 ] CVE-2013-0448\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0448\n[ 75 ] CVE-2013-0449\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0449\n[ 76 ] CVE-2013-0809\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0809\n[ 77 ] CVE-2013-1473\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1473\n[ 78 ] CVE-2013-1479\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1479\n[ 79 ] CVE-2013-1481\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1481\n[ 80 ] CVE-2013-1484\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1484\n[ 81 ] CVE-2013-1485\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1485\n[ 82 ] CVE-2013-1486\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1486\n[ 83 ] CVE-2013-1487\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1487\n[ 84 ] CVE-2013-1488\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1488\n[ 85 ] CVE-2013-1491\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1491\n[ 86 ] CVE-2013-1493\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1493\n[ 87 ] CVE-2013-1500\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1500\n[ 88 ] CVE-2013-1518\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1518\n[ 89 ] CVE-2013-1537\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1537\n[ 90 ] CVE-2013-1540\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1540\n[ 91 ] CVE-2013-1557\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1557\n[ 92 ] CVE-2013-1558\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1558\n[ 93 ] CVE-2013-1561\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1561\n[ 94 ] CVE-2013-1563\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1563\n[ 95 ] CVE-2013-1564\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1564\n[ 96 ] CVE-2013-1569\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1569\n[ 97 ] CVE-2013-1571\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1571\n[ 98 ] CVE-2013-2383\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2383\n[ 99 ] CVE-2013-2384\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2384\n[ 100 ] CVE-2013-2394\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2394\n[ 101 ] CVE-2013-2400\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2400\n[ 102 ] CVE-2013-2407\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2407\n[ 103 ] CVE-2013-2412\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2412\n[ 104 ] CVE-2013-2414\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2414\n[ 105 ] CVE-2013-2415\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2415\n[ 106 ] CVE-2013-2416\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2416\n[ 107 ] CVE-2013-2417\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2417\n[ 108 ] CVE-2013-2418\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2418\n[ 109 ] CVE-2013-2419\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2419\n[ 110 ] CVE-2013-2420\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2420\n[ 111 ] CVE-2013-2421\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2421\n[ 112 ] CVE-2013-2422\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2422\n[ 113 ] CVE-2013-2423\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2423\n[ 114 ] CVE-2013-2424\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2424\n[ 115 ] CVE-2013-2425\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2425\n[ 116 ] CVE-2013-2426\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2426\n[ 117 ] CVE-2013-2427\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2427\n[ 118 ] CVE-2013-2428\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2428\n[ 119 ] CVE-2013-2429\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2429\n[ 120 ] CVE-2013-2430\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2430\n[ 121 ] CVE-2013-2431\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2431\n[ 122 ] CVE-2013-2432\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2432\n[ 123 ] CVE-2013-2433\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2433\n[ 124 ] CVE-2013-2434\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2434\n[ 125 ] CVE-2013-2435\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2435\n[ 126 ] CVE-2013-2436\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2436\n[ 127 ] CVE-2013-2437\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2437\n[ 128 ] CVE-2013-2438\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2438\n[ 129 ] CVE-2013-2439\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2439\n[ 130 ] CVE-2013-2440\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2440\n[ 131 ] CVE-2013-2442\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2442\n[ 132 ] CVE-2013-2443\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2443\n[ 133 ] CVE-2013-2444\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2444\n[ 134 ] CVE-2013-2445\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2445\n[ 135 ] CVE-2013-2446\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2446\n[ 136 ] CVE-2013-2447\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2447\n[ 137 ] CVE-2013-2448\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2448\n[ 138 ] CVE-2013-2449\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2449\n[ 139 ] CVE-2013-2450\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2450\n[ 140 ] CVE-2013-2451\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2451\n[ 141 ] CVE-2013-2452\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2452\n[ 142 ] CVE-2013-2453\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2453\n[ 143 ] CVE-2013-2454\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2454\n[ 144 ] CVE-2013-2455\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2455\n[ 145 ] CVE-2013-2456\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2456\n[ 146 ] CVE-2013-2457\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2457\n[ 147 ] CVE-2013-2458\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2458\n[ 148 ] CVE-2013-2459\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2459\n[ 149 ] CVE-2013-2460\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2460\n[ 150 ] CVE-2013-2461\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2461\n[ 151 ] CVE-2013-2462\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2462\n[ 152 ] CVE-2013-2463\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2463\n[ 153 ] CVE-2013-2464\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2464\n[ 154 ] CVE-2013-2465\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2465\n[ 155 ] CVE-2013-2466\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2466\n[ 156 ] CVE-2013-2467\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2467\n[ 157 ] CVE-2013-2468\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2468\n[ 158 ] CVE-2013-2469\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2469\n[ 159 ] CVE-2013-2470\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2470\n[ 160 ] CVE-2013-2471\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2471\n[ 161 ] CVE-2013-2472\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2472\n[ 162 ] CVE-2013-2473\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2473\n[ 163 ] CVE-2013-3743\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3743\n[ 164 ] CVE-2013-3744\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3744\n[ 165 ] CVE-2013-3829\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3829\n[ 166 ] CVE-2013-5772\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5772\n[ 167 ] CVE-2013-5774\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5774\n[ 168 ] CVE-2013-5775\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5775\n[ 169 ] CVE-2013-5776\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5776\n[ 170 ] CVE-2013-5777\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5777\n[ 171 ] CVE-2013-5778\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5778\n[ 172 ] CVE-2013-5780\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5780\n[ 173 ] CVE-2013-5782\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5782\n[ 174 ] CVE-2013-5783\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5783\n[ 175 ] CVE-2013-5784\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5784\n[ 176 ] CVE-2013-5787\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5787\n[ 177 ] CVE-2013-5788\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5788\n[ 178 ] CVE-2013-5789\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5789\n[ 179 ] CVE-2013-5790\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5790\n[ 180 ] CVE-2013-5797\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5797\n[ 181 ] CVE-2013-5800\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5800\n[ 182 ] CVE-2013-5801\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5801\n[ 183 ] CVE-2013-5802\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5802\n[ 184 ] CVE-2013-5803\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5803\n[ 185 ] CVE-2013-5804\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5804\n[ 186 ] CVE-2013-5805\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5805\n[ 187 ] CVE-2013-5806\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5806\n[ 188 ] CVE-2013-5809\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5809\n[ 189 ] CVE-2013-5810\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5810\n[ 190 ] CVE-2013-5812\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5812\n[ 191 ] CVE-2013-5814\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5814\n[ 192 ] CVE-2013-5817\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5817\n[ 193 ] CVE-2013-5818\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5818\n[ 194 ] CVE-2013-5819\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5819\n[ 195 ] CVE-2013-5820\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5820\n[ 196 ] CVE-2013-5823\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5823\n[ 197 ] CVE-2013-5824\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5824\n[ 198 ] CVE-2013-5825\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5825\n[ 199 ] CVE-2013-5829\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5829\n[ 200 ] CVE-2013-5830\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5830\n[ 201 ] CVE-2013-5831\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5831\n[ 202 ] CVE-2013-5832\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5832\n[ 203 ] CVE-2013-5838\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5838\n[ 204 ] CVE-2013-5840\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5840\n[ 205 ] CVE-2013-5842\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5842\n[ 206 ] CVE-2013-5843\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5843\n[ 207 ] CVE-2013-5844\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5844\n[ 208 ] CVE-2013-5846\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5846\n[ 209 ] CVE-2013-5848\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5848\n[ 210 ] CVE-2013-5849\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5849\n[ 211 ] CVE-2013-5850\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5850\n[ 212 ] CVE-2013-5851\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5851\n[ 213 ] CVE-2013-5852\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5852\n[ 214 ] CVE-2013-5854\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5854\n[ 215 ] CVE-2013-5870\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5870\n[ 216 ] CVE-2013-5878\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5878\n[ 217 ] CVE-2013-5887\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5887\n[ 218 ] CVE-2013-5888\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5888\n[ 219 ] CVE-2013-5889\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5889\n[ 220 ] CVE-2013-5893\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5893\n[ 221 ] CVE-2013-5895\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5895\n[ 222 ] CVE-2013-5896\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5896\n[ 223 ] CVE-2013-5898\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5898\n[ 224 ] CVE-2013-5899\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5899\n[ 225 ] CVE-2013-5902\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5902\n[ 226 ] CVE-2013-5904\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5904\n[ 227 ] CVE-2013-5905\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5905\n[ 228 ] CVE-2013-5906\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5906\n[ 229 ] CVE-2013-5907\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5907\n[ 230 ] CVE-2013-5910\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5910\n[ 231 ] CVE-2014-0368\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0368\n[ 232 ] CVE-2014-0373\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0373\n[ 233 ] CVE-2014-0375\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0375\n[ 234 ] CVE-2014-0376\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0376\n[ 235 ] CVE-2014-0382\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0382\n[ 236 ] CVE-2014-0385\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0385\n[ 237 ] CVE-2014-0387\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0387\n[ 238 ] CVE-2014-0403\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0403\n[ 239 ] CVE-2014-0408\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0408\n[ 240 ] CVE-2014-0410\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0410\n[ 241 ] CVE-2014-0411\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0411\n[ 242 ] CVE-2014-0415\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0415\n[ 243 ] CVE-2014-0416\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0416\n[ 244 ] CVE-2014-0417\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0417\n[ 245 ] CVE-2014-0418\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0418\n[ 246 ] CVE-2014-0422\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0422\n[ 247 ] CVE-2014-0423\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0423\n[ 248 ] CVE-2014-0424\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0424\n[ 249 ] CVE-2014-0428\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0428\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201401-30.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2014 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Important: java-1.7.0-openjdk security update\nAdvisory ID: RHSA-2012:1223-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2012-1223.html\nIssue date: 2012-09-03\nCVE Names: CVE-2012-0547 CVE-2012-1682 CVE-2012-3136 \n CVE-2012-4681 \n=====================================================================\n\n1. Summary:\n\nUpdated java-1.7.0-openjdk packages that fix several security issues are\nnow available for Red Hat Enterprise Linux 6. \n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Desktop (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Desktop Optional (v. 6) - i386, noarch, x86_64\nRed Hat Enterprise Linux HPC Node Optional (v. 6) - noarch, x86_64\nRed Hat Enterprise Linux Server (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Server Optional (v. 6) - i386, noarch, x86_64\nRed Hat Enterprise Linux Workstation (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 6) - i386, noarch, x86_64\n\n3. Description:\n\nThese packages provide the OpenJDK 7 Java Runtime Environment and the\nOpenJDK 7 Software Development Kit. \n\nMultiple improper permission check issues were discovered in the Beans\ncomponent in OpenJDK. \n(CVE-2012-0547)\n\nAll users of java-1.7.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect. \n\n4. Solution:\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied. \n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\n5. Bugs fixed (http://bugzilla.redhat.com/):\n\n852051 - CVE-2012-4681 OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)\n853097 - CVE-2012-1682 OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)\n853138 - CVE-2012-3136 OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)\n853228 - CVE-2012-0547 OpenJDK: AWT hardening fixes (AWT, 7163201)\n\n6. Package List:\n\nRed Hat Enterprise Linux Desktop (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\ni386:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\n\nx86_64:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nRed Hat Enterprise Linux Desktop Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\ni386:\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.i686.rpm\n\nnoarch:\njava-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm\n\nx86_64:\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nRed Hat Enterprise Linux HPC Node Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6ComputeNode/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\nnoarch:\njava-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm\n\nx86_64:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\ni386:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\n\nx86_64:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\ni386:\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.i686.rpm\n\nnoarch:\njava-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm\n\nx86_64:\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\ni386:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\n\nx86_64:\njava-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/java-1.7.0-openjdk-1.7.0.5-2.2.1.el6_3.3.src.rpm\n\ni386:\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.i686.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.i686.rpm\n\nnoarch:\njava-1.7.0-openjdk-javadoc-1.7.0.5-2.2.1.el6_3.3.noarch.rpm\n\nx86_64:\njava-1.7.0-openjdk-debuginfo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-demo-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-devel-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\njava-1.7.0-openjdk-src-1.7.0.5-2.2.1.el6_3.3.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/#package\n\n7. References:\n\nhttps://www.redhat.com/security/data/cve/CVE-2012-0547.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-1682.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-3136.html\nhttps://www.redhat.com/security/data/cve/CVE-2012-4681.html\nhttps://access.redhat.com/security/updates/classification/#important\nhttp://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2012 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.4 (GNU/Linux)\n\niD8DBQFQRKzHXlSAg2UNWIIRAt9QAJ9qt+dYZrGWLZfelO3gxXIHLRIrjgCdE0e8\n0vzPqUIZfBkT+eNBNebUuVE=\n=WYyS\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n", "sources": [ { "db": "NVD", "id": "CVE-2012-4681" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" }, { "db": "VULMON", "id": "CVE-2012-4681" }, { "db": "PACKETSTORM", "id": "120430" }, { "db": "PACKETSTORM", "id": "117846" }, { "db": "PACKETSTORM", "id": "116402" }, { "db": "PACKETSTORM", "id": "124943" }, { "db": "PACKETSTORM", "id": "116176" } ], "trust": 2.97 }, "exploit_availability": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=20865", "trust": 0.1, "type": "exploit" } ], "sources": [ { "db": "VULMON", "id": "CVE-2012-4681" } ] }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2012-4681", "trust": 3.8 }, { "db": "USCERT", "id": "TA12-240A", "trust": 2.4 }, { "db": "BID", "id": "55213", "trust": 1.9 }, { "db": "SECUNIA", "id": "51044", "trust": 1.6 }, { "db": "CERT/CC", "id": "VU#636312", "trust": 1.2 }, { "db": "JVNDB", "id": "JVNDB-2012-003918", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201208-570", "trust": 0.6 }, { "db": "ICS CERT", "id": "ICSA-17-213-02", "trust": 0.3 }, { "db": "ZDI", "id": "ZDI-12-197", "trust": 0.3 }, { "db": "BID", "id": "55336", "trust": 0.3 }, { "db": "BID", "id": "55337", "trust": 0.3 }, { "db": "VULMON", "id": "CVE-2012-4681", "trust": 0.1 }, { "db": "USCERT", "id": "TA13-051A", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "120430", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "117846", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "116402", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "124943", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "116176", "trust": 0.1 } ], "sources": [ { "db": "VULMON", "id": "CVE-2012-4681" }, { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "db": "PACKETSTORM", "id": "120430" }, { "db": "PACKETSTORM", "id": "117846" }, { "db": "PACKETSTORM", "id": "116402" }, { "db": "PACKETSTORM", "id": "124943" }, { "db": "PACKETSTORM", "id": "116176" }, { "db": "CNNVD", "id": "CNNVD-201208-570" }, { "db": "NVD", "id": "CVE-2012-4681" } ] }, "id": "VAR-201208-0292", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 1.0 }, "last_update_date": "2024-11-28T21:37:16.142000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "NV13-001", "trust": 0.8, "url": "http://jpn.nec.com/security-info/secinfo/nv13-001.html" }, { "title": "SUSE-SU-2012:1231", "trust": 0.8, "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" }, { "title": "SUSE-SU-2012:1398", "trust": 0.8, "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" }, { "title": "Java SE Downloads", "trust": 0.8, "url": "http://www.oracle.com/technetwork/java/javase/downloads/index.html" }, { "title": "The Security Manager", "trust": 0.8, "url": "http://docs.oracle.com/javase/tutorial/essential/environment/security.html" }, { "title": "Oracle Security Alert for CVE-2012-4681", "trust": 0.8, "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "title": "RHSA-2012:1225", "trust": 0.8, "url": "http://rhn.redhat.com/errata/RHSA-2012-1225.html" }, { "title": "TA12-240A", "trust": 0.8, "url": "http://software.fujitsu.com/jp/security/vulnerabilities/ta12-240a.html" }, { "title": "Red Hat: Important: java-1.7.0-openjdk security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20121223 - Security Advisory" }, { "title": "Red Hat: Critical: java-1.7.0-oracle security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20121225 - Security Advisory" }, { "title": "Red Hat: Important: java-1.6.0-openjdk security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20121222 - Security Advisory" }, { "title": "Red Hat: Critical: java-1.6.0-openjdk security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20121221 - Security Advisory" }, { "title": "Red Hat: Critical: java-1.7.0-ibm security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20121289 - Security Advisory" }, { "title": "Red Hat: Critical: java-1.6.0-sun security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20121392 - Security Advisory" }, { "title": "", "trust": 0.1, "url": "https://github.com/Live-Hack-CVE/CVE-2012-4681 " }, { "title": "PoCs-CVE_2012_4681", "trust": 0.1, "url": "https://github.com/ZH3FENG/PoCs-CVE_2012_4681 " }, { "title": "Public-Pcaps", "trust": 0.1, "url": "https://github.com/thongsia/Public-Pcaps " }, { "title": "BroMalware-Exercise", "trust": 0.1, "url": "https://github.com/LiamRandall/BroMalware-Exercise " }, { "title": "CVE-2012-4681-Armoring", "trust": 0.1, "url": "https://github.com/benjholla/CVE-2012-4681-Armoring " }, { "title": "obfuscation-stuff", "trust": 0.1, "url": "https://github.com/alphaSeclab/obfuscation-stuff " } ], "sources": [ { "db": "VULMON", "id": "CVE-2012-4681" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "NVD-CWE-noinfo", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2012-4681" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.7, "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "trust": 2.4, "url": "http://www.us-cert.gov/cas/techalerts/ta12-240a.html" }, { "trust": 1.9, "url": "http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html" }, { "trust": 1.6, "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" }, { "trust": 1.6, "url": "http://marc.info/?l=bugtraq\u0026m=135109152819176\u0026w=2" }, { "trust": 1.6, "url": "http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/" }, { "trust": 1.6, "url": "http://secunia.com/advisories/51044" }, { "trust": 1.6, "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" }, { "trust": 1.6, "url": "http://immunityproducts.blogspot.com/2012/08/java-0day-analysis-cve-2012-4681.html" }, { "trust": 1.6, "url": "http://www.deependresearch.org/2012/08/java-7-vulnerability-analysis.html" }, { "trust": 1.6, "url": "http://rhn.redhat.com/errata/rhsa-2012-1225.html" }, { "trust": 1.6, "url": "http://www.securityfocus.com/bid/55213" }, { "trust": 1.6, "url": "https://community.rapid7.com/community/metasploit/blog/2012/08/27/lets-start-the-week-with-a-new-java-0day" }, { "trust": 1.1, "url": "http://www.kb.cert.org/vuls/id/636312" }, { "trust": 0.9, "url": "http://java.sun.com" }, { "trust": 0.9, "url": "http://www.ibm.com/developerworks/java/jdk/alerts/" }, { "trust": 0.9, "url": "https://downloads.avaya.com/css/p8/documents/100169377" }, { "trust": 0.9, "url": "http://www.oracle.com/technetwork/java/index.html" }, { "trust": 0.9, "url": "http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c03533078" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4681" }, { "trust": 0.8, "url": "http://www.ipa.go.jp/security/ciadr/vul/20120831-oracle.html" }, { "trust": 0.8, "url": "http://www.jpcert.or.jp/at/2012/at120028.html" }, { "trust": 0.8, "url": "http://jvn.jp/cert/jvnta12-240a/" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4681" }, { "trust": 0.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0547" }, { "trust": 0.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1682" }, { "trust": 0.3, "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-august/020083.html" }, { "trust": 0.3, "url": "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-august/020065.html" }, { "trust": 0.3, "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-213-02" }, { "trust": 0.3, "url": "http://www.vmware.com/security/advisories/vmsa-2013-0006.html" }, { "trust": 0.3, "url": "https://downloads.avaya.com/css/p8/documents/100166370" }, { "trust": 0.3, "url": "http://www.zerodayinitiative.com/advisories/zdi-12-197" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3136" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4681" }, { "trust": 0.1, "url": "http://www.us-cert.gov/privacy/notification.html" }, { "trust": 0.1, "url": "http://www.kb.cert.org/vuls/id/636312#solution\u003e" }, { "trust": 0.1, "url": "http://docs.oracle.com/javase/tutorial/essential/environment/security.html\u003e" }, { "trust": 0.1, "url": "https://support.apple.com/kb/ht5241\u003e" }, { "trust": 0.1, "url": "http://www.us-cert.gov/privacy/" }, { "trust": 0.1, "url": "http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html\u003e" }, { "trust": 0.1, "url": "https://www.us-cert.gov/reading_room/securing_browser/#safari\u003e" }, { "trust": 0.1, "url": "http://www.us-cert.gov/cas/signup.html" }, { "trust": 0.1, "url": "https://support.mozilla.org/en-us/kb/how%20to%20turn%20off%20java%20applets\u003e" }, { "trust": 0.1, "url": "http://www.us-cert.gov/cas/techalerts/ta13-051a.html" }, { "trust": 0.1, "url": "http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/client-security.html\u003e" }, { "trust": 0.1, "url": "http://noscript.net/\u003e" }, { "trust": 0.1, "url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/" }, { "trust": 0.1, "url": "http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secbullarchive/" }, { "trust": 0.1, "url": "http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins" }, { "trust": 0.1, "url": "https://www.hp.com/go/swa" }, { "trust": 0.1, "url": "http://www.hp.com/go/java" }, { "trust": 0.1, "url": "http://www.mandriva.com/security/" }, { "trust": 0.1, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-1682" }, { "trust": 0.1, "url": "http://www.mandriva.com/security/advisories" }, { "trust": 0.1, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-0547" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0507" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5870" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0503" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0419" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2469" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2443" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1717" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1716" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0505" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1518" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2419" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1558" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3829" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5818" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1541" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5829" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5804" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1485" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5889" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0449" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2440" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5806" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5087" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2422" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1540" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0385" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2427" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2437" }, { "trust": 0.1, "url": "http://creativecommons.org/licenses/by-sa/2.5" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0445" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0500" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5075" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2468" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3743" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0422" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0501" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2426" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5893" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3159" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3174" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5084" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5888" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1711" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0437" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1541" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2461" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0373" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0351" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1563" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5789" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5820" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0504" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1682" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2470" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0547" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5899" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2451" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5801" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5823" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0423" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2459" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5832" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5848" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0428" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2460" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1713" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0415" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5784" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1719" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1533" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2400" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1564" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3143" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5830" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0448" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5800" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0438" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5810" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5905" }, { "trust": 0.1, "url": "http://security.gentoo.org/glsa/glsa-201401-30.xml" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5904" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2456" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5803" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5831" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5086" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2452" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2383" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2447" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2423" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5778" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0422" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2445" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2450" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5780" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5073" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1493" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2446" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3744" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5854" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2394" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5069" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-5035" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0498" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1500" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5852" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5777" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5850" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0499" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2384" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0499" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1557" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0409" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1532" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2428" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2453" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0401" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5085" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2407" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2421" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4681" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2462" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0423" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2429" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5083" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0375" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2439" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5068" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2416" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3136" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0376" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5824" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3342" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5776" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5071" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1531" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0417" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0504" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1723" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0497" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5819" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0507" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1722" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5774" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5782" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5895" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2466" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1725" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5790" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5805" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0403" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5802" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0446" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1719" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5849" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2011-5035" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2448" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2418" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2458" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5788" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0416" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5825" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0506" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1484" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0424" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2430" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1473" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2415" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5887" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0418" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3216" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1718" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5772" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0410" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0368" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1717" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2425" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5074" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0500" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2454" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2444" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5072" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2436" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1722" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4416" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1537" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5902" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2432" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0387" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0502" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1716" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1533" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2449" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0503" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2457" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2438" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1721" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0382" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0169" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5812" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-3563" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0809" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5077" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3213" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5846" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1718" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0497" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1723" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1726" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1571" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5775" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5787" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5081" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5898" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5840" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1531" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5851" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2465" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1481" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2431" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3563" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2433" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2473" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5844" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5906" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5783" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1711" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2463" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1532" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1561" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2412" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2435" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1491" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5809" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5910" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2420" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1487" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1713" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5907" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0501" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2417" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2471" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5896" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5843" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5067" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0498" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2414" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2424" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5076" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2467" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5842" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5079" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0411" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-1721" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1569" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-1724" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5797" }, { "trust": 0.1, "url": "http://security.gentoo.org/" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5070" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1479" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1486" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2434" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2442" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1488" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2464" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2472" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-0502" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5878" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0505" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5817" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5814" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-0408" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0402" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2012-0506" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5838" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0430" }, { "trust": 0.1, "url": "https://bugs.gentoo.org." }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2455" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5088" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5089" }, { "trust": 0.1, "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce" }, { "trust": 0.1, "url": "https://www.redhat.com/security/data/cve/cve-2012-4681.html" }, { "trust": 0.1, "url": "https://access.redhat.com/security/team/contact/" }, { "trust": 0.1, "url": "https://access.redhat.com/security/team/key/#package" }, { "trust": 0.1, "url": "https://www.redhat.com/security/data/cve/cve-2012-0547.html" }, { "trust": 0.1, "url": "https://rhn.redhat.com/errata/rhsa-2012-1223.html" }, { "trust": 0.1, "url": "http://bugzilla.redhat.com/):" }, { "trust": 0.1, "url": "https://www.redhat.com/security/data/cve/cve-2012-1682.html" }, { "trust": 0.1, "url": "https://www.redhat.com/security/data/cve/cve-2012-3136.html" }, { "trust": 0.1, "url": "https://access.redhat.com/knowledge/articles/11258" }, { "trust": 0.1, "url": "https://access.redhat.com/security/updates/classification/#important" } ], "sources": [ { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "db": "PACKETSTORM", "id": "120430" }, { "db": "PACKETSTORM", "id": "117846" }, { "db": "PACKETSTORM", "id": "116402" }, { "db": "PACKETSTORM", "id": "124943" }, { "db": "PACKETSTORM", "id": "116176" }, { "db": "CNNVD", "id": "CNNVD-201208-570" }, { "db": "NVD", "id": "CVE-2012-4681" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULMON", "id": "CVE-2012-4681" }, { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" }, { "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "db": "PACKETSTORM", "id": "120430" }, { "db": "PACKETSTORM", "id": "117846" }, { "db": "PACKETSTORM", "id": "116402" }, { "db": "PACKETSTORM", "id": "124943" }, { "db": "PACKETSTORM", "id": "116176" }, { "db": "CNNVD", "id": "CNNVD-201208-570" }, { "db": "NVD", "id": "CVE-2012-4681" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2012-08-28T00:00:00", "db": "VULMON", "id": "CVE-2012-4681" }, { "date": "2012-08-27T00:00:00", "db": "BID", "id": "55213" }, { "date": "2012-08-30T00:00:00", "db": "BID", "id": "55336" }, { "date": "2012-08-30T00:00:00", "db": "BID", "id": "55337" }, { "date": "2012-08-29T00:00:00", "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "date": "2013-02-21T03:28:18", "db": "PACKETSTORM", "id": "120430" }, { "date": "2012-11-02T20:33:00", "db": "PACKETSTORM", "id": "117846" }, { "date": "2012-09-11T05:52:05", "db": "PACKETSTORM", "id": "116402" }, { "date": "2014-01-27T18:30:13", "db": "PACKETSTORM", "id": "124943" }, { "date": "2012-09-04T00:06:09", "db": "PACKETSTORM", "id": "116176" }, { "date": "2012-08-29T00:00:00", "db": "CNNVD", "id": "CNNVD-201208-570" }, { "date": "2012-08-28T00:55:01.860000", "db": "NVD", "id": "CVE-2012-4681" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2022-12-21T00:00:00", "db": "VULMON", "id": "CVE-2012-4681" }, { "date": "2017-08-03T11:09:00", "db": "BID", "id": "55213" }, { "date": "2015-03-19T09:33:00", "db": "BID", "id": "55336" }, { "date": "2014-01-28T18:44:00", "db": "BID", "id": "55337" }, { "date": "2013-02-04T00:00:00", "db": "JVNDB", "id": "JVNDB-2012-003918" }, { "date": "2022-05-16T00:00:00", "db": "CNNVD", "id": "CNNVD-201208-570" }, { "date": "2024-11-21T01:43:20.600000", "db": "NVD", "id": "CVE-2012-4681" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "network", "sources": [ { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" } ], "trust": 0.9 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Oracle Java 7 Vulnerability to", "sources": [ { "db": "JVNDB", "id": "JVNDB-2012-003918" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Unknown", "sources": [ { "db": "BID", "id": "55213" }, { "db": "BID", "id": "55336" }, { "db": "BID", "id": "55337" } ], "trust": 0.9 } }
rhsa-2012_1225
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "The Oracle Java 7 release includes the Oracle Java 7 Runtime Environment\nand the Oracle Java 7 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java 7 Runtime\nEnvironment and the Oracle Java 7 Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Security\nAlert page, listed in the References section. (CVE-2012-4681,\nCVE-2012-1682, CVE-2012-3136, CVE-2012-0547)\n\nRed Hat is aware that a public exploit for CVE-2012-4681 is available that\nexecutes code without user interaction when a user visits a malicious web\npage using a browser with the Oracle Java 7 web browser plug-in enabled.\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 7 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1225", "url": "https://access.redhat.com/errata/RHSA-2012:1225" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1225.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T12:12:49+00:00", "generator": { "date": "2024-11-14T12:12:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1225", "initial_release_date": "2012-09-04T07:04:00+00:00", "revision_history": [ { "date": "2012-09-04T07:04:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-04T07:04:31+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:12:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
RHSA-2012:1289
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-ibm packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM\nJava Software Development Kit.\n\nThis update fixes several vulnerabilities in the IBM Java Runtime\nEnvironment and the IBM Java Software Development Kit. Detailed\nvulnerability descriptions are linked from the IBM Security alerts page,\nlisted in the References section. (CVE-2012-0547, CVE-2012-0551,\nCVE-2012-1682, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1719,\nCVE-2012-1721, CVE-2012-1722, CVE-2012-1725, CVE-2012-1726, CVE-2012-3136,\nCVE-2012-4681)\n\nAll users of java-1.7.0-ibm are advised to upgrade to these updated\npackages, containing the IBM Java SE 7 SR2 release. All running instances\nof IBM Java must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1289", "url": "https://access.redhat.com/errata/RHSA-2012:1289" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "https://www.ibm.com/developerworks/java/jdk/alerts/", "url": "https://www.ibm.com/developerworks/java/jdk/alerts/" }, { "category": "external", "summary": "829358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829358" }, { "category": "external", "summary": "829360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829360" }, { "category": "external", "summary": "829361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829361" }, { "category": "external", "summary": "829371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829371" }, { "category": "external", "summary": "829376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829376" }, { "category": "external", "summary": "829377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829377" }, { "category": "external", "summary": "831353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831353" }, { "category": "external", "summary": "831354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831354" }, { "category": "external", "summary": "831355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831355" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1289.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-ibm security update", "tracking": { "current_release_date": "2024-11-14T12:13:05+00:00", "generator": { "date": "2024-11-14T12:13:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1289", "initial_release_date": "2012-09-18T22:46:00+00:00", "revision_history": [ { "date": "2012-09-18T22:46:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-18T22:52:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:13:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-plugin@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-plugin@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-0551", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831355" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0551" }, { "category": "external", "summary": "RHBZ#831355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831355" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0551", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0551" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-1713", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829361" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1713" }, { "category": "external", "summary": "RHBZ#829361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829361" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1713", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1713" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1713", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1713" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)" }, { "cve": "CVE-2012-1716", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829360" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1716" }, { "category": "external", "summary": "RHBZ#829360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829360" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1716", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1716" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1716", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1716" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)" }, { "cve": "CVE-2012-1717", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829358" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure temporary file permissions (JRE, 7143606)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1717" }, { "category": "external", "summary": "RHBZ#829358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1717", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1717" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1717", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1717" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insecure temporary file permissions (JRE, 7143606)" }, { "cve": "CVE-2012-1719", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829371" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1719" }, { "category": "external", "summary": "RHBZ#829371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1719", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1719" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1719" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)" }, { "cve": "CVE-2012-1721", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831353" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1721" }, { "category": "external", "summary": "RHBZ#831353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831353" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1721", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1721" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1721", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1721" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1722", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831354" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1722" }, { "category": "external", "summary": "RHBZ#831354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831354" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1722", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1722" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1722", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1722" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1725", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829376" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient invokespecial \u003cinit\u003e verification (HotSpot, 7160757)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1725" }, { "category": "external", "summary": "RHBZ#829376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829376" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1725", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1725" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1725" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient invokespecial \u003cinit\u003e verification (HotSpot, 7160757)" }, { "cve": "CVE-2012-1726", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829377" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1726" }, { "category": "external", "summary": "RHBZ#829377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829377" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1726", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1726" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1726", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1726" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
rhsa-2012:1225
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "The Oracle Java 7 release includes the Oracle Java 7 Runtime Environment\nand the Oracle Java 7 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java 7 Runtime\nEnvironment and the Oracle Java 7 Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Security\nAlert page, listed in the References section. (CVE-2012-4681,\nCVE-2012-1682, CVE-2012-3136, CVE-2012-0547)\n\nRed Hat is aware that a public exploit for CVE-2012-4681 is available that\nexecutes code without user interaction when a user visits a malicious web\npage using a browser with the Oracle Java 7 web browser plug-in enabled.\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 7 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1225", "url": "https://access.redhat.com/errata/RHSA-2012:1225" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1225.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T12:12:49+00:00", "generator": { "date": "2024-11-14T12:12:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1225", "initial_release_date": "2012-09-04T07:04:00+00:00", "revision_history": [ { "date": "2012-09-04T07:04:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-04T07:04:31+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:12:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
RHSA-2012:1223
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-openjdk packages that fix several security issues are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 7 Java Runtime Environment and the\nOpenJDK 7 Software Development Kit.\n\nMultiple improper permission check issues were discovered in the Beans\ncomponent in OpenJDK. An untrusted Java application or applet could use\nthese flaws to bypass Java sandbox restrictions. (CVE-2012-4681,\nCVE-2012-1682, CVE-2012-3136)\n\nA hardening fix was applied to the AWT component in OpenJDK, removing\nfunctionality from the restricted SunToolkit class that was used in\ncombination with other flaws to bypass Java sandbox restrictions.\n(CVE-2012-0547)\n\nAll users of java-1.7.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1223", "url": "https://access.redhat.com/errata/RHSA-2012:1223" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1223.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-openjdk security update", "tracking": { "current_release_date": "2024-11-14T12:13:01+00:00", "generator": { "date": "2024-11-14T12:13:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1223", "initial_release_date": "2012-09-03T12:57:00+00:00", "revision_history": [ { "date": "2012-09-03T12:57:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-03T13:00:27+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:13:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.5-2.2.1.el6_3.3?arch=noarch\u0026epoch=1" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
rhsa-2012:1289
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-ibm packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM\nJava Software Development Kit.\n\nThis update fixes several vulnerabilities in the IBM Java Runtime\nEnvironment and the IBM Java Software Development Kit. Detailed\nvulnerability descriptions are linked from the IBM Security alerts page,\nlisted in the References section. (CVE-2012-0547, CVE-2012-0551,\nCVE-2012-1682, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1719,\nCVE-2012-1721, CVE-2012-1722, CVE-2012-1725, CVE-2012-1726, CVE-2012-3136,\nCVE-2012-4681)\n\nAll users of java-1.7.0-ibm are advised to upgrade to these updated\npackages, containing the IBM Java SE 7 SR2 release. All running instances\nof IBM Java must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1289", "url": "https://access.redhat.com/errata/RHSA-2012:1289" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "https://www.ibm.com/developerworks/java/jdk/alerts/", "url": "https://www.ibm.com/developerworks/java/jdk/alerts/" }, { "category": "external", "summary": "829358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829358" }, { "category": "external", "summary": "829360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829360" }, { "category": "external", "summary": "829361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829361" }, { "category": "external", "summary": "829371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829371" }, { "category": "external", "summary": "829376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829376" }, { "category": "external", "summary": "829377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829377" }, { "category": "external", "summary": "831353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831353" }, { "category": "external", "summary": "831354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831354" }, { "category": "external", "summary": "831355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831355" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1289.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-ibm security update", "tracking": { "current_release_date": "2024-11-14T12:13:05+00:00", "generator": { "date": "2024-11-14T12:13:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1289", "initial_release_date": "2012-09-18T22:46:00+00:00", "revision_history": [ { "date": "2012-09-18T22:46:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-18T22:52:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:13:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-plugin@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-plugin@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-0551", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831355" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0551" }, { "category": "external", "summary": "RHBZ#831355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831355" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0551", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0551" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-1713", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829361" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1713" }, { "category": "external", "summary": "RHBZ#829361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829361" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1713", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1713" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1713", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1713" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)" }, { "cve": "CVE-2012-1716", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829360" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1716" }, { "category": "external", "summary": "RHBZ#829360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829360" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1716", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1716" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1716", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1716" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)" }, { "cve": "CVE-2012-1717", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829358" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure temporary file permissions (JRE, 7143606)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1717" }, { "category": "external", "summary": "RHBZ#829358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1717", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1717" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1717", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1717" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insecure temporary file permissions (JRE, 7143606)" }, { "cve": "CVE-2012-1719", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829371" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1719" }, { "category": "external", "summary": "RHBZ#829371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1719", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1719" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1719" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)" }, { "cve": "CVE-2012-1721", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831353" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1721" }, { "category": "external", "summary": "RHBZ#831353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831353" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1721", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1721" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1721", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1721" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1722", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831354" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1722" }, { "category": "external", "summary": "RHBZ#831354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831354" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1722", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1722" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1722", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1722" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1725", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829376" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient invokespecial \u003cinit\u003e verification (HotSpot, 7160757)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1725" }, { "category": "external", "summary": "RHBZ#829376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829376" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1725", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1725" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1725" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient invokespecial \u003cinit\u003e verification (HotSpot, 7160757)" }, { "cve": "CVE-2012-1726", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829377" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1726" }, { "category": "external", "summary": "RHBZ#829377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829377" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1726", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1726" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1726", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1726" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
rhsa-2012_1289
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-ibm packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM\nJava Software Development Kit.\n\nThis update fixes several vulnerabilities in the IBM Java Runtime\nEnvironment and the IBM Java Software Development Kit. Detailed\nvulnerability descriptions are linked from the IBM Security alerts page,\nlisted in the References section. (CVE-2012-0547, CVE-2012-0551,\nCVE-2012-1682, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1719,\nCVE-2012-1721, CVE-2012-1722, CVE-2012-1725, CVE-2012-1726, CVE-2012-3136,\nCVE-2012-4681)\n\nAll users of java-1.7.0-ibm are advised to upgrade to these updated\npackages, containing the IBM Java SE 7 SR2 release. All running instances\nof IBM Java must be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1289", "url": "https://access.redhat.com/errata/RHSA-2012:1289" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "https://www.ibm.com/developerworks/java/jdk/alerts/", "url": "https://www.ibm.com/developerworks/java/jdk/alerts/" }, { "category": "external", "summary": "829358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829358" }, { "category": "external", "summary": "829360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829360" }, { "category": "external", "summary": "829361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829361" }, { "category": "external", "summary": "829371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829371" }, { "category": "external", "summary": "829376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829376" }, { "category": "external", "summary": "829377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829377" }, { "category": "external", "summary": "831353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831353" }, { "category": "external", "summary": "831354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831354" }, { "category": "external", "summary": "831355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831355" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1289.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-ibm security update", "tracking": { "current_release_date": "2024-11-14T12:13:05+00:00", "generator": { "date": "2024-11-14T12:13:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1289", "initial_release_date": "2012-09-18T22:46:00+00:00", "revision_history": [ { "date": "2012-09-18T22:46:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-18T22:52:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:13:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-plugin@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-plugin@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-demo@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-devel@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-src@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm-jdbc@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_id": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-ibm@1.7.0.2.0-1jpp.3.el6_3?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" }, "product_reference": "java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-0551", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831355" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0551" }, { "category": "external", "summary": "RHBZ#831355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831355" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0551", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0551" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-1713", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829361" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1713" }, { "category": "external", "summary": "RHBZ#829361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829361" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1713", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1713" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1713", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1713" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617)" }, { "cve": "CVE-2012-1716", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829360" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1716" }, { "category": "external", "summary": "RHBZ#829360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829360" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1716", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1716" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1716", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1716" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)" }, { "cve": "CVE-2012-1717", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829358" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure temporary file permissions (JRE, 7143606)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1717" }, { "category": "external", "summary": "RHBZ#829358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1717", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1717" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1717", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1717" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insecure temporary file permissions (JRE, 7143606)" }, { "cve": "CVE-2012-1719", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829371" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1719" }, { "category": "external", "summary": "RHBZ#829371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1719", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1719" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1719" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851)" }, { "cve": "CVE-2012-1721", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831353" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1721" }, { "category": "external", "summary": "RHBZ#831353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831353" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1721", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1721" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1721", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1721" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1722", "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831354" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1722" }, { "category": "external", "summary": "RHBZ#831354", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831354" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1722", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1722" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1722", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1722" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment)" }, { "cve": "CVE-2012-1725", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829376" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient invokespecial \u003cinit\u003e verification (HotSpot, 7160757)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1725" }, { "category": "external", "summary": "RHBZ#829376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829376" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1725", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1725" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1725", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1725" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient invokespecial \u003cinit\u003e verification (HotSpot, 7160757)" }, { "cve": "CVE-2012-1726", "discovery_date": "2012-06-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "829377" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1726" }, { "category": "external", "summary": "RHBZ#829377", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829377" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1726", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1726" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1726", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1726" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-18T22:46:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1289" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Client-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Server-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-jdbc-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-plugin-1:1.7.0.2.0-1jpp.3.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.ppc64", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.s390x", "6Workstation-Supplementary-6.3.z:java-1.7.0-ibm-src-1:1.7.0.2.0-1jpp.3.el6_3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
rhsa-2012:1223
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-openjdk packages that fix several security issues are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 7 Java Runtime Environment and the\nOpenJDK 7 Software Development Kit.\n\nMultiple improper permission check issues were discovered in the Beans\ncomponent in OpenJDK. An untrusted Java application or applet could use\nthese flaws to bypass Java sandbox restrictions. (CVE-2012-4681,\nCVE-2012-1682, CVE-2012-3136)\n\nA hardening fix was applied to the AWT component in OpenJDK, removing\nfunctionality from the restricted SunToolkit class that was used in\ncombination with other flaws to bypass Java sandbox restrictions.\n(CVE-2012-0547)\n\nAll users of java-1.7.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1223", "url": "https://access.redhat.com/errata/RHSA-2012:1223" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1223.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-openjdk security update", "tracking": { "current_release_date": "2024-11-14T12:13:01+00:00", "generator": { "date": "2024-11-14T12:13:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1223", "initial_release_date": "2012-09-03T12:57:00+00:00", "revision_history": [ { "date": "2012-09-03T12:57:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-03T13:00:27+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:13:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.5-2.2.1.el6_3.3?arch=noarch\u0026epoch=1" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
RHSA-2012:1225
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "The Oracle Java 7 release includes the Oracle Java 7 Runtime Environment\nand the Oracle Java 7 Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java 7 Runtime\nEnvironment and the Oracle Java 7 Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Security\nAlert page, listed in the References section. (CVE-2012-4681,\nCVE-2012-1682, CVE-2012-3136, CVE-2012-0547)\n\nRed Hat is aware that a public exploit for CVE-2012-4681 is available that\nexecutes code without user interaction when a user visits a malicious web\npage using a browser with the Oracle Java 7 web browser plug-in enabled.\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 7 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1225", "url": "https://access.redhat.com/errata/RHSA-2012:1225" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1225.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T12:12:49+00:00", "generator": { "date": "2024-11-14T12:12:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1225", "initial_release_date": "2012-09-04T07:04:00+00:00", "revision_history": [ { "date": "2012-09-04T07:04:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-04T07:04:31+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:12:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.7-1jpp.5.el6_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.7-1jpp.5.el6_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-04T07:04:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1225" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Client-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6ComputeNode-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Server-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-devel-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-jdbc-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-plugin-1:1.7.0.7-1jpp.5.el6_3.x86_64", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.i686", "6Workstation-Supplementary-6.3.z:java-1.7.0-oracle-src-1:1.7.0.7-1jpp.5.el6_3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
rhsa-2012_1223
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-openjdk packages that fix several security issues are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 7 Java Runtime Environment and the\nOpenJDK 7 Software Development Kit.\n\nMultiple improper permission check issues were discovered in the Beans\ncomponent in OpenJDK. An untrusted Java application or applet could use\nthese flaws to bypass Java sandbox restrictions. (CVE-2012-4681,\nCVE-2012-1682, CVE-2012-3136)\n\nA hardening fix was applied to the AWT component in OpenJDK, removing\nfunctionality from the restricted SunToolkit class that was used in\ncombination with other flaws to bypass Java sandbox restrictions.\n(CVE-2012-0547)\n\nAll users of java-1.7.0-openjdk are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK Java\nmust be restarted for the update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:1223", "url": "https://access.redhat.com/errata/RHSA-2012:1223" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1223.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-openjdk security update", "tracking": { "current_release_date": "2024-11-14T12:13:01+00:00", "generator": { "date": "2024-11-14T12:13:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2012:1223", "initial_release_date": "2012-09-03T12:57:00+00:00", "revision_history": [ { "date": "2012-09-03T12:57:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-09-03T13:00:27+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T12:13:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-devel@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-src@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-demo@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-debuginfo@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_id": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk@1.7.0.5-2.2.1.el6_3.3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-openjdk-javadoc@1.7.0.5-2.2.1.el6_3.3?arch=noarch\u0026epoch=1" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Client-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6ComputeNode-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Server-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch" }, "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "relates_to_product_reference": "6Workstation-optional-6.3.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" }, "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "relates_to_product_reference": "6Workstation-optional-6.3.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853228" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT hardening fixes (AWT, 7163201)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "RHBZ#853228", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853228" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0547", "url": "https://www.cve.org/CVERecord?id=CVE-2012-0547" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0547" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 0.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:N", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: AWT hardening fixes (AWT, 7163201)" }, { "cve": "CVE-2012-1682", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853097" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "RHBZ#853097", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853097" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1682", "url": "https://www.cve.org/CVERecord?id=CVE-2012-1682" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1682" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)" }, { "cve": "CVE-2012-3136", "discovery_date": "2012-08-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "853138" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "RHBZ#853138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=853138" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3136", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3136" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3136" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" } ], "release_date": "2012-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567)" }, { "cve": "CVE-2012-4681", "discovery_date": "2012-08-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "852051" } ], "notes": [ { "category": "description", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw allowed an attacker to circumvent all restrictions applied by the Java security manager. The Java security manager is used to sandbox Java applets in web browsers, but is also used in a variety of other applications.\n\nRed Hat has tested the flaw and confirmed that it affected Java SE 7 provided by OpenJDK 7 (java-1.7.0-openjdk), Oracle Java SE 7 (java-1.7.0-oracle) and IBM Java SE 7 (java-1.7.0-ibm) as shipped with Red Hat Enterprise Linux 6. Updates correcting this issue were released for all affected packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "RHBZ#852051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852051" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4681", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4681" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4681" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html", "url": "http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html" }, { "category": "external", "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" } ], "release_date": "2012-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-09-03T12:57:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:1223" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Client-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Client-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Client-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6ComputeNode-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Server-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Server-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Server-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.src", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-demo-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-devel-1:1.7.0.5-2.2.1.el6_3.3.x86_64", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-javadoc-1:1.7.0.5-2.2.1.el6_3.3.noarch", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.i686", "6Workstation-optional-6.3.z:java-1.7.0-openjdk-src-1:1.7.0.5-2.2.1.el6_3.3.x86_64" ] } ], "threats": [ { "category": "exploit_status", "date": "2022-03-03T00:00:00+00:00", "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473)" } ] }
suse-su-2015:0344-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for IBM Java 7", "title": "Title of the patch" }, { "category": "description", "text": "\nIBM Java 7 SR6 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n * CVE-2013-5458\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n * CVE-2013-5456\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n * CVE-2013-5457\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n * CVE-2013-4041\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n * CVE-2013-5375\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n * CVE-2013-5372\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n * CVE-2013-5843\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n * CVE-2013-5789\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n * CVE-2013-5830\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n * CVE-2013-5829\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n * CVE-2013-5787\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n * CVE-2013-5788\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n * CVE-2013-5824\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n * CVE-2013-5842\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n * CVE-2013-5782\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n * CVE-2013-5817\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n * CVE-2013-5809\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n * CVE-2013-5814\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n * CVE-2013-5832\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n * CVE-2013-5850\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n * CVE-2013-5838\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n * CVE-2013-5802\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n * CVE-2013-5812\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n * CVE-2013-5804\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n * CVE-2013-5783\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n * CVE-2013-3829\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n * CVE-2013-5823\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n * CVE-2013-5831\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n * CVE-2013-5820\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n * CVE-2013-5819\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n * CVE-2013-5818\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n * CVE-2013-5848\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n * CVE-2013-5776\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n * CVE-2013-5774\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n * CVE-2013-5825\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n * CVE-2013-5840\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n * CVE-2013-5801\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n * CVE-2013-5778\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n * CVE-2013-5851\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n * CVE-2013-5800\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n * CVE-2013-5784\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n * CVE-2013-5849\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n * CVE-2013-5790\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n * CVE-2013-5780\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n * CVE-2013-5797\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n * CVE-2013-5803\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n * CVE-2013-5772\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n", "title": "Description of the patch" }, { "category": "details", "text": "slessp2-java-1_7_0-ibm", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0344-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2015:0344-1", "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150344-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2015:0344-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-February/001241.html" }, { "category": "self", "summary": "SUSE Bug 592934", "url": "https://bugzilla.suse.com/592934" }, { "category": "self", "summary": "SUSE Bug 772640", "url": "https://bugzilla.suse.com/772640" }, { "category": "self", "summary": "SUSE Bug 780897", "url": "https://bugzilla.suse.com/780897" }, { "category": "self", "summary": "SUSE Bug 788750", "url": "https://bugzilla.suse.com/788750" }, { "category": "self", "summary": "SUSE Bug 798535", "url": "https://bugzilla.suse.com/798535" }, { "category": "self", "summary": "SUSE Bug 813939", "url": "https://bugzilla.suse.com/813939" }, { "category": "self", "summary": "SUSE Bug 817062", "url": "https://bugzilla.suse.com/817062" }, { "category": "self", "summary": "SUSE Bug 819285", "url": "https://bugzilla.suse.com/819285" }, { "category": "self", "summary": "SUSE Bug 819288", "url": "https://bugzilla.suse.com/819288" }, { "category": "self", "summary": "SUSE Bug 823034", "url": "https://bugzilla.suse.com/823034" }, { "category": "self", "summary": "SUSE Bug 829212", "url": "https://bugzilla.suse.com/829212" }, { "category": "self", "summary": "SUSE Bug 849212", "url": "https://bugzilla.suse.com/849212" }, { "category": "self", "summary": "SUSE Bug 862064", "url": "https://bugzilla.suse.com/862064" }, { "category": "self", "summary": "SUSE Bug 877429", "url": "https://bugzilla.suse.com/877429" }, { "category": "self", "summary": "SUSE Bug 891701", "url": "https://bugzilla.suse.com/891701" }, { "category": "self", "summary": "SUSE Bug 901223", "url": "https://bugzilla.suse.com/901223" }, { "category": "self", "summary": "SUSE Bug 901239", "url": "https://bugzilla.suse.com/901239" }, { "category": "self", "summary": "SUSE Bug 904889", "url": "https://bugzilla.suse.com/904889" }, { "category": "self", "summary": "SUSE Bug 912434", "url": "https://bugzilla.suse.com/912434" }, { "category": "self", "summary": "SUSE Bug 912447", "url": "https://bugzilla.suse.com/912447" }, { "category": "self", "summary": "SUSE Bug 916265", "url": "https://bugzilla.suse.com/916265" }, { "category": "self", "summary": "SUSE Bug 916266", "url": "https://bugzilla.suse.com/916266" }, { "category": "self", "summary": "SUSE Bug 930365", "url": "https://bugzilla.suse.com/930365" }, { "category": "self", "summary": "SUSE Bug 931702", "url": "https://bugzilla.suse.com/931702" }, { "category": "self", "summary": "SUSE CVE CVE-2012-0547 page", "url": "https://www.suse.com/security/cve/CVE-2012-0547/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-0551 page", "url": "https://www.suse.com/security/cve/CVE-2012-0551/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1531 page", "url": "https://www.suse.com/security/cve/CVE-2012-1531/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1532 page", "url": "https://www.suse.com/security/cve/CVE-2012-1532/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1533 page", "url": "https://www.suse.com/security/cve/CVE-2012-1533/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1541 page", "url": "https://www.suse.com/security/cve/CVE-2012-1541/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1682 page", "url": "https://www.suse.com/security/cve/CVE-2012-1682/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1713 page", "url": "https://www.suse.com/security/cve/CVE-2012-1713/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1716 page", "url": "https://www.suse.com/security/cve/CVE-2012-1716/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1717 page", "url": "https://www.suse.com/security/cve/CVE-2012-1717/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1718 page", "url": "https://www.suse.com/security/cve/CVE-2012-1718/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1719 page", "url": "https://www.suse.com/security/cve/CVE-2012-1719/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1721 page", "url": "https://www.suse.com/security/cve/CVE-2012-1721/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1722 page", "url": "https://www.suse.com/security/cve/CVE-2012-1722/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1725 page", "url": "https://www.suse.com/security/cve/CVE-2012-1725/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1726 page", "url": "https://www.suse.com/security/cve/CVE-2012-1726/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3136 page", "url": "https://www.suse.com/security/cve/CVE-2012-3136/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3143 page", "url": "https://www.suse.com/security/cve/CVE-2012-3143/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3159 page", "url": "https://www.suse.com/security/cve/CVE-2012-3159/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3174 page", "url": "https://www.suse.com/security/cve/CVE-2012-3174/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3213 page", "url": "https://www.suse.com/security/cve/CVE-2012-3213/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3216 page", "url": "https://www.suse.com/security/cve/CVE-2012-3216/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-3342 page", "url": "https://www.suse.com/security/cve/CVE-2012-3342/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-4681 page", "url": "https://www.suse.com/security/cve/CVE-2012-4681/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5067 page", "url": "https://www.suse.com/security/cve/CVE-2012-5067/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5069 page", "url": "https://www.suse.com/security/cve/CVE-2012-5069/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5070 page", "url": "https://www.suse.com/security/cve/CVE-2012-5070/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5071 page", "url": "https://www.suse.com/security/cve/CVE-2012-5071/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5072 page", "url": "https://www.suse.com/security/cve/CVE-2012-5072/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5073 page", "url": "https://www.suse.com/security/cve/CVE-2012-5073/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5074 page", "url": "https://www.suse.com/security/cve/CVE-2012-5074/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5075 page", "url": "https://www.suse.com/security/cve/CVE-2012-5075/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5076 page", "url": "https://www.suse.com/security/cve/CVE-2012-5076/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5077 page", "url": "https://www.suse.com/security/cve/CVE-2012-5077/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5079 page", "url": "https://www.suse.com/security/cve/CVE-2012-5079/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5081 page", "url": "https://www.suse.com/security/cve/CVE-2012-5081/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5083 page", "url": "https://www.suse.com/security/cve/CVE-2012-5083/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5084 page", "url": "https://www.suse.com/security/cve/CVE-2012-5084/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5086 page", "url": "https://www.suse.com/security/cve/CVE-2012-5086/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5087 page", "url": "https://www.suse.com/security/cve/CVE-2012-5087/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5088 page", "url": "https://www.suse.com/security/cve/CVE-2012-5088/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-5089 page", "url": "https://www.suse.com/security/cve/CVE-2012-5089/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0169 page", "url": "https://www.suse.com/security/cve/CVE-2013-0169/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0351 page", "url": "https://www.suse.com/security/cve/CVE-2013-0351/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0401 page", "url": "https://www.suse.com/security/cve/CVE-2013-0401/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0409 page", "url": "https://www.suse.com/security/cve/CVE-2013-0409/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0419 page", "url": "https://www.suse.com/security/cve/CVE-2013-0419/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0422 page", "url": "https://www.suse.com/security/cve/CVE-2013-0422/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0423 page", "url": "https://www.suse.com/security/cve/CVE-2013-0423/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0424 page", "url": "https://www.suse.com/security/cve/CVE-2013-0424/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0425 page", "url": "https://www.suse.com/security/cve/CVE-2013-0425/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0426 page", "url": "https://www.suse.com/security/cve/CVE-2013-0426/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0427 page", "url": "https://www.suse.com/security/cve/CVE-2013-0427/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0428 page", "url": "https://www.suse.com/security/cve/CVE-2013-0428/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0431 page", "url": "https://www.suse.com/security/cve/CVE-2013-0431/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0432 page", "url": "https://www.suse.com/security/cve/CVE-2013-0432/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0433 page", "url": "https://www.suse.com/security/cve/CVE-2013-0433/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0434 page", "url": "https://www.suse.com/security/cve/CVE-2013-0434/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0435 page", "url": "https://www.suse.com/security/cve/CVE-2013-0435/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0437 page", "url": "https://www.suse.com/security/cve/CVE-2013-0437/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0438 page", "url": "https://www.suse.com/security/cve/CVE-2013-0438/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0440 page", "url": "https://www.suse.com/security/cve/CVE-2013-0440/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0441 page", "url": "https://www.suse.com/security/cve/CVE-2013-0441/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0442 page", "url": "https://www.suse.com/security/cve/CVE-2013-0442/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0443 page", "url": "https://www.suse.com/security/cve/CVE-2013-0443/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0444 page", "url": "https://www.suse.com/security/cve/CVE-2013-0444/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0445 page", "url": "https://www.suse.com/security/cve/CVE-2013-0445/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0446 page", "url": "https://www.suse.com/security/cve/CVE-2013-0446/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0449 page", "url": "https://www.suse.com/security/cve/CVE-2013-0449/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0450 page", "url": "https://www.suse.com/security/cve/CVE-2013-0450/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0485 page", "url": "https://www.suse.com/security/cve/CVE-2013-0485/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0809 page", "url": "https://www.suse.com/security/cve/CVE-2013-0809/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1473 page", "url": "https://www.suse.com/security/cve/CVE-2013-1473/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1476 page", "url": "https://www.suse.com/security/cve/CVE-2013-1476/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1478 page", "url": "https://www.suse.com/security/cve/CVE-2013-1478/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1480 page", "url": "https://www.suse.com/security/cve/CVE-2013-1480/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1484 page", "url": "https://www.suse.com/security/cve/CVE-2013-1484/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1485 page", "url": "https://www.suse.com/security/cve/CVE-2013-1485/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1486 page", "url": "https://www.suse.com/security/cve/CVE-2013-1486/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1487 page", "url": "https://www.suse.com/security/cve/CVE-2013-1487/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1491 page", "url": "https://www.suse.com/security/cve/CVE-2013-1491/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1493 page", "url": "https://www.suse.com/security/cve/CVE-2013-1493/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1500 page", "url": "https://www.suse.com/security/cve/CVE-2013-1500/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1537 page", "url": "https://www.suse.com/security/cve/CVE-2013-1537/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1540 page", "url": "https://www.suse.com/security/cve/CVE-2013-1540/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1557 page", "url": "https://www.suse.com/security/cve/CVE-2013-1557/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1563 page", "url": "https://www.suse.com/security/cve/CVE-2013-1563/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1569 page", "url": "https://www.suse.com/security/cve/CVE-2013-1569/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-1571 page", "url": "https://www.suse.com/security/cve/CVE-2013-1571/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2383 page", "url": "https://www.suse.com/security/cve/CVE-2013-2383/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2384 page", "url": "https://www.suse.com/security/cve/CVE-2013-2384/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2394 page", "url": "https://www.suse.com/security/cve/CVE-2013-2394/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2400 page", "url": "https://www.suse.com/security/cve/CVE-2013-2400/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2407 page", "url": "https://www.suse.com/security/cve/CVE-2013-2407/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2412 page", "url": "https://www.suse.com/security/cve/CVE-2013-2412/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2417 page", "url": "https://www.suse.com/security/cve/CVE-2013-2417/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2418 page", "url": "https://www.suse.com/security/cve/CVE-2013-2418/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2419 page", "url": "https://www.suse.com/security/cve/CVE-2013-2419/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2420 page", "url": "https://www.suse.com/security/cve/CVE-2013-2420/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2422 page", "url": "https://www.suse.com/security/cve/CVE-2013-2422/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2424 page", "url": "https://www.suse.com/security/cve/CVE-2013-2424/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2429 page", "url": "https://www.suse.com/security/cve/CVE-2013-2429/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2430 page", "url": "https://www.suse.com/security/cve/CVE-2013-2430/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2432 page", "url": "https://www.suse.com/security/cve/CVE-2013-2432/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2433 page", "url": "https://www.suse.com/security/cve/CVE-2013-2433/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2435 page", "url": "https://www.suse.com/security/cve/CVE-2013-2435/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2437 page", "url": "https://www.suse.com/security/cve/CVE-2013-2437/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2440 page", "url": "https://www.suse.com/security/cve/CVE-2013-2440/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2442 page", "url": "https://www.suse.com/security/cve/CVE-2013-2442/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2443 page", "url": "https://www.suse.com/security/cve/CVE-2013-2443/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2444 page", "url": "https://www.suse.com/security/cve/CVE-2013-2444/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2446 page", "url": "https://www.suse.com/security/cve/CVE-2013-2446/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2447 page", "url": "https://www.suse.com/security/cve/CVE-2013-2447/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2448 page", "url": "https://www.suse.com/security/cve/CVE-2013-2448/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2449 page", "url": "https://www.suse.com/security/cve/CVE-2013-2449/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2450 page", "url": "https://www.suse.com/security/cve/CVE-2013-2450/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2451 page", "url": "https://www.suse.com/security/cve/CVE-2013-2451/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2452 page", "url": "https://www.suse.com/security/cve/CVE-2013-2452/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2453 page", "url": "https://www.suse.com/security/cve/CVE-2013-2453/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2454 page", "url": "https://www.suse.com/security/cve/CVE-2013-2454/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2455 page", "url": "https://www.suse.com/security/cve/CVE-2013-2455/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2456 page", "url": "https://www.suse.com/security/cve/CVE-2013-2456/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2457 page", "url": "https://www.suse.com/security/cve/CVE-2013-2457/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2458 page", "url": "https://www.suse.com/security/cve/CVE-2013-2458/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2459 page", "url": "https://www.suse.com/security/cve/CVE-2013-2459/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2460 page", "url": "https://www.suse.com/security/cve/CVE-2013-2460/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2462 page", "url": "https://www.suse.com/security/cve/CVE-2013-2462/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2463 page", "url": "https://www.suse.com/security/cve/CVE-2013-2463/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2464 page", "url": "https://www.suse.com/security/cve/CVE-2013-2464/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2465 page", "url": "https://www.suse.com/security/cve/CVE-2013-2465/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2466 page", "url": "https://www.suse.com/security/cve/CVE-2013-2466/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2468 page", "url": "https://www.suse.com/security/cve/CVE-2013-2468/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2469 page", "url": "https://www.suse.com/security/cve/CVE-2013-2469/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2470 page", "url": "https://www.suse.com/security/cve/CVE-2013-2470/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2471 page", "url": "https://www.suse.com/security/cve/CVE-2013-2471/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2472 page", "url": "https://www.suse.com/security/cve/CVE-2013-2472/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-2473 page", "url": "https://www.suse.com/security/cve/CVE-2013-2473/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3006 page", "url": "https://www.suse.com/security/cve/CVE-2013-3006/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3007 page", "url": "https://www.suse.com/security/cve/CVE-2013-3007/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3008 page", "url": "https://www.suse.com/security/cve/CVE-2013-3008/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3009 page", "url": "https://www.suse.com/security/cve/CVE-2013-3009/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3010 page", "url": "https://www.suse.com/security/cve/CVE-2013-3010/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3011 page", "url": "https://www.suse.com/security/cve/CVE-2013-3011/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3012 page", "url": "https://www.suse.com/security/cve/CVE-2013-3012/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3743 page", "url": "https://www.suse.com/security/cve/CVE-2013-3743/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3744 page", "url": "https://www.suse.com/security/cve/CVE-2013-3744/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-3829 page", "url": "https://www.suse.com/security/cve/CVE-2013-3829/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-4002 page", "url": "https://www.suse.com/security/cve/CVE-2013-4002/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-4041 page", "url": "https://www.suse.com/security/cve/CVE-2013-4041/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5372 page", "url": "https://www.suse.com/security/cve/CVE-2013-5372/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5375 page", "url": "https://www.suse.com/security/cve/CVE-2013-5375/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5456 page", "url": "https://www.suse.com/security/cve/CVE-2013-5456/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5457 page", "url": "https://www.suse.com/security/cve/CVE-2013-5457/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5458 page", "url": "https://www.suse.com/security/cve/CVE-2013-5458/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5772 page", "url": "https://www.suse.com/security/cve/CVE-2013-5772/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5774 page", "url": "https://www.suse.com/security/cve/CVE-2013-5774/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5776 page", "url": "https://www.suse.com/security/cve/CVE-2013-5776/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5778 page", "url": "https://www.suse.com/security/cve/CVE-2013-5778/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5780 page", "url": "https://www.suse.com/security/cve/CVE-2013-5780/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5782 page", "url": "https://www.suse.com/security/cve/CVE-2013-5782/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5783 page", "url": "https://www.suse.com/security/cve/CVE-2013-5783/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5784 page", "url": "https://www.suse.com/security/cve/CVE-2013-5784/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5787 page", "url": "https://www.suse.com/security/cve/CVE-2013-5787/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5788 page", "url": "https://www.suse.com/security/cve/CVE-2013-5788/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5789 page", "url": "https://www.suse.com/security/cve/CVE-2013-5789/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5790 page", "url": "https://www.suse.com/security/cve/CVE-2013-5790/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5797 page", "url": "https://www.suse.com/security/cve/CVE-2013-5797/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5800 page", "url": "https://www.suse.com/security/cve/CVE-2013-5800/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5801 page", "url": "https://www.suse.com/security/cve/CVE-2013-5801/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5802 page", "url": "https://www.suse.com/security/cve/CVE-2013-5802/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5803 page", "url": "https://www.suse.com/security/cve/CVE-2013-5803/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5804 page", "url": "https://www.suse.com/security/cve/CVE-2013-5804/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5809 page", "url": "https://www.suse.com/security/cve/CVE-2013-5809/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5812 page", "url": "https://www.suse.com/security/cve/CVE-2013-5812/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5814 page", "url": "https://www.suse.com/security/cve/CVE-2013-5814/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5817 page", "url": "https://www.suse.com/security/cve/CVE-2013-5817/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5818 page", "url": "https://www.suse.com/security/cve/CVE-2013-5818/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5819 page", "url": "https://www.suse.com/security/cve/CVE-2013-5819/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5820 page", "url": "https://www.suse.com/security/cve/CVE-2013-5820/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5823 page", "url": "https://www.suse.com/security/cve/CVE-2013-5823/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5824 page", "url": "https://www.suse.com/security/cve/CVE-2013-5824/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5825 page", "url": "https://www.suse.com/security/cve/CVE-2013-5825/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5829 page", "url": "https://www.suse.com/security/cve/CVE-2013-5829/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5830 page", "url": "https://www.suse.com/security/cve/CVE-2013-5830/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5831 page", "url": "https://www.suse.com/security/cve/CVE-2013-5831/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5832 page", "url": "https://www.suse.com/security/cve/CVE-2013-5832/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5838 page", "url": "https://www.suse.com/security/cve/CVE-2013-5838/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5840 page", "url": "https://www.suse.com/security/cve/CVE-2013-5840/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5842 page", "url": "https://www.suse.com/security/cve/CVE-2013-5842/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5843 page", "url": "https://www.suse.com/security/cve/CVE-2013-5843/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5848 page", "url": "https://www.suse.com/security/cve/CVE-2013-5848/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5849 page", "url": "https://www.suse.com/security/cve/CVE-2013-5849/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5850 page", "url": "https://www.suse.com/security/cve/CVE-2013-5850/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5851 page", "url": "https://www.suse.com/security/cve/CVE-2013-5851/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5878 page", "url": "https://www.suse.com/security/cve/CVE-2013-5878/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5884 page", "url": "https://www.suse.com/security/cve/CVE-2013-5884/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5887 page", "url": "https://www.suse.com/security/cve/CVE-2013-5887/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5888 page", "url": "https://www.suse.com/security/cve/CVE-2013-5888/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5889 page", "url": "https://www.suse.com/security/cve/CVE-2013-5889/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5896 page", "url": "https://www.suse.com/security/cve/CVE-2013-5896/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5898 page", "url": "https://www.suse.com/security/cve/CVE-2013-5898/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5899 page", "url": "https://www.suse.com/security/cve/CVE-2013-5899/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5907 page", "url": "https://www.suse.com/security/cve/CVE-2013-5907/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-5910 page", "url": "https://www.suse.com/security/cve/CVE-2013-5910/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-6629 page", "url": "https://www.suse.com/security/cve/CVE-2013-6629/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-6954 page", "url": "https://www.suse.com/security/cve/CVE-2013-6954/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0368 page", "url": "https://www.suse.com/security/cve/CVE-2014-0368/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0373 page", "url": "https://www.suse.com/security/cve/CVE-2014-0373/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0375 page", "url": "https://www.suse.com/security/cve/CVE-2014-0375/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0376 page", "url": "https://www.suse.com/security/cve/CVE-2014-0376/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0387 page", "url": "https://www.suse.com/security/cve/CVE-2014-0387/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0403 page", "url": "https://www.suse.com/security/cve/CVE-2014-0403/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0410 page", "url": "https://www.suse.com/security/cve/CVE-2014-0410/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0411 page", "url": "https://www.suse.com/security/cve/CVE-2014-0411/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0415 page", "url": "https://www.suse.com/security/cve/CVE-2014-0415/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0416 page", "url": "https://www.suse.com/security/cve/CVE-2014-0416/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0417 page", "url": "https://www.suse.com/security/cve/CVE-2014-0417/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0422 page", "url": "https://www.suse.com/security/cve/CVE-2014-0422/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0423 page", "url": "https://www.suse.com/security/cve/CVE-2014-0423/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0424 page", "url": "https://www.suse.com/security/cve/CVE-2014-0424/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0428 page", "url": "https://www.suse.com/security/cve/CVE-2014-0428/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0429 page", "url": "https://www.suse.com/security/cve/CVE-2014-0429/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0446 page", "url": "https://www.suse.com/security/cve/CVE-2014-0446/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0448 page", "url": "https://www.suse.com/security/cve/CVE-2014-0448/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0449 page", "url": "https://www.suse.com/security/cve/CVE-2014-0449/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0451 page", "url": "https://www.suse.com/security/cve/CVE-2014-0451/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0452 page", "url": "https://www.suse.com/security/cve/CVE-2014-0452/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0453 page", "url": "https://www.suse.com/security/cve/CVE-2014-0453/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0454 page", "url": "https://www.suse.com/security/cve/CVE-2014-0454/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0455 page", "url": "https://www.suse.com/security/cve/CVE-2014-0455/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0457 page", "url": "https://www.suse.com/security/cve/CVE-2014-0457/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0458 page", "url": "https://www.suse.com/security/cve/CVE-2014-0458/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0459 page", "url": "https://www.suse.com/security/cve/CVE-2014-0459/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0460 page", "url": "https://www.suse.com/security/cve/CVE-2014-0460/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0461 page", "url": "https://www.suse.com/security/cve/CVE-2014-0461/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0878 page", "url": "https://www.suse.com/security/cve/CVE-2014-0878/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-1876 page", "url": "https://www.suse.com/security/cve/CVE-2014-1876/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2398 page", "url": "https://www.suse.com/security/cve/CVE-2014-2398/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2401 page", "url": "https://www.suse.com/security/cve/CVE-2014-2401/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2402 page", "url": "https://www.suse.com/security/cve/CVE-2014-2402/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2409 page", "url": "https://www.suse.com/security/cve/CVE-2014-2409/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2412 page", "url": "https://www.suse.com/security/cve/CVE-2014-2412/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2414 page", "url": "https://www.suse.com/security/cve/CVE-2014-2414/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2420 page", "url": "https://www.suse.com/security/cve/CVE-2014-2420/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2421 page", "url": "https://www.suse.com/security/cve/CVE-2014-2421/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2423 page", "url": "https://www.suse.com/security/cve/CVE-2014-2423/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2427 page", "url": "https://www.suse.com/security/cve/CVE-2014-2427/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-2428 page", "url": "https://www.suse.com/security/cve/CVE-2014-2428/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8891 page", "url": "https://www.suse.com/security/cve/CVE-2014-8891/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8892 page", "url": "https://www.suse.com/security/cve/CVE-2014-8892/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0138 page", "url": "https://www.suse.com/security/cve/CVE-2015-0138/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0192 page", "url": "https://www.suse.com/security/cve/CVE-2015-0192/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0204 page", "url": "https://www.suse.com/security/cve/CVE-2015-0204/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0458 page", "url": "https://www.suse.com/security/cve/CVE-2015-0458/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0459 page", "url": "https://www.suse.com/security/cve/CVE-2015-0459/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0469 page", "url": "https://www.suse.com/security/cve/CVE-2015-0469/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0477 page", "url": "https://www.suse.com/security/cve/CVE-2015-0477/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0478 page", "url": "https://www.suse.com/security/cve/CVE-2015-0478/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0480 page", "url": "https://www.suse.com/security/cve/CVE-2015-0480/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0488 page", "url": "https://www.suse.com/security/cve/CVE-2015-0488/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0491 page", "url": "https://www.suse.com/security/cve/CVE-2015-0491/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1914 page", "url": "https://www.suse.com/security/cve/CVE-2015-1914/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-2808 page", "url": "https://www.suse.com/security/cve/CVE-2015-2808/" } ], "title": "Security update for IBM Java 7", "tracking": { "current_release_date": "2013-11-19T10:42:44Z", "generator": { "date": "2013-11-19T10:42:44Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2015:0344-1", "initial_release_date": "2013-11-19T10:42:44Z", "revision_history": [ { "date": "2013-11-19T10:42:44Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "product": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "product_id": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586" } }, { "category": "product_version", "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "product": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "product_id": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586" } }, { "category": "product_version", "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "product": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "product_id": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586" } }, { "category": "product_version", "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "product": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586" } }, { "category": "product_version", "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "product": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "product_id": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "product": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "product_id": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64" } }, { "category": "product_version", "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "product": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64" } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "product": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "product_id": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x" } }, { "category": "product_version", "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "product": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "product_id": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x" } }, { "category": "product_version", "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "product": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "product": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "product_id": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64" } }, { "category": "product_version", "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "product": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "product_id": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64" } }, { "category": "product_version", "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "product": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "product_id": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64" } }, { "category": "product_version", "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "product": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "product_id": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64" } }, { "category": "product_version", "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "product": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "product_id": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP2", "product": { "name": "SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_sles:11:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP2-LTSS", "product": { "name": "SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:11:sp2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2", "product_id": "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64" }, "product_reference": "java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586" }, "product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" }, "product_reference": "java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-0547", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-0547" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and \"a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited.\" NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"toolkit internals references.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-0547", "url": "https://www.suse.com/security/cve/CVE-2012-0547" }, { "category": "external", "summary": "SUSE Bug 777499 for CVE-2012-0547", "url": "https://bugzilla.suse.com/777499" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-0547", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2012-0547" }, { "cve": "CVE-2012-0551", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-0551" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-0551", "url": "https://www.suse.com/security/cve/CVE-2012-0551" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-0551", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-0551", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-0551" }, { "cve": "CVE-2012-1531", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1531" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1531", "url": "https://www.suse.com/security/cve/CVE-2012-1531" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-1531", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-1531", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-1531", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-1531", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1531" }, { "cve": "CVE-2012-1532", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1532" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1532", "url": "https://www.suse.com/security/cve/CVE-2012-1532" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-1532", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-1532", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-1532", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-1532", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1532" }, { "cve": "CVE-2012-1533", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1533" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1533", "url": "https://www.suse.com/security/cve/CVE-2012-1533" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-1533", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-1533", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-1533", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-1533", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1533" }, { "cve": "CVE-2012-1541", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1541" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1541", "url": "https://www.suse.com/security/cve/CVE-2012-1541" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2012-1541", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2012-1541", "url": "https://bugzilla.suse.com/806786" }, { "category": "external", "summary": "SUSE Bug 818972 for CVE-2012-1541", "url": "https://bugzilla.suse.com/818972" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1541" }, { "cve": "CVE-2012-1682", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1682" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to \"XMLDecoder security issue via ClassFinder.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1682", "url": "https://www.suse.com/security/cve/CVE-2012-1682" }, { "category": "external", "summary": "SUSE Bug 777499 for CVE-2012-1682", "url": "https://bugzilla.suse.com/777499" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1682", "url": "https://bugzilla.suse.com/780897" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-1682", "url": "https://bugzilla.suse.com/785433" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1682" }, { "cve": "CVE-2012-1713", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1713" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1713", "url": "https://www.suse.com/security/cve/CVE-2012-1713" }, { "category": "external", "summary": "SUSE Bug 766802 for CVE-2012-1713", "url": "https://bugzilla.suse.com/766802" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1713", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1713", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1713" }, { "cve": "CVE-2012-1716", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1716" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1716", "url": "https://www.suse.com/security/cve/CVE-2012-1716" }, { "category": "external", "summary": "SUSE Bug 766802 for CVE-2012-1716", "url": "https://bugzilla.suse.com/766802" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1716", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1716", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1716" }, { "cve": "CVE-2012-1717", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1717" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1717", "url": "https://www.suse.com/security/cve/CVE-2012-1717" }, { "category": "external", "summary": "SUSE Bug 766802 for CVE-2012-1717", "url": "https://bugzilla.suse.com/766802" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1717", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1717", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-1717" }, { "cve": "CVE-2012-1718", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1718" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1718", "url": "https://www.suse.com/security/cve/CVE-2012-1718" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1718", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1718", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-1718" }, { "cve": "CVE-2012-1719", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1719" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1719", "url": "https://www.suse.com/security/cve/CVE-2012-1719" }, { "category": "external", "summary": "SUSE Bug 766802 for CVE-2012-1719", "url": "https://bugzilla.suse.com/766802" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1719", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1719", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-1719" }, { "cve": "CVE-2012-1721", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1721" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1721", "url": "https://www.suse.com/security/cve/CVE-2012-1721" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1721", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1721", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1721" }, { "cve": "CVE-2012-1722", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1722" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1722", "url": "https://www.suse.com/security/cve/CVE-2012-1722" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1722", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1722", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1722" }, { "cve": "CVE-2012-1725", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1725" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1725", "url": "https://www.suse.com/security/cve/CVE-2012-1725" }, { "category": "external", "summary": "SUSE Bug 766802 for CVE-2012-1725", "url": "https://bugzilla.suse.com/766802" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-1725", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1725", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-1725" }, { "cve": "CVE-2012-1726", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1726" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1726", "url": "https://www.suse.com/security/cve/CVE-2012-1726" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-1726", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-1726" }, { "cve": "CVE-2012-3136", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3136" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3136", "url": "https://www.suse.com/security/cve/CVE-2012-3136" }, { "category": "external", "summary": "SUSE Bug 777499 for CVE-2012-3136", "url": "https://bugzilla.suse.com/777499" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-3136", "url": "https://bugzilla.suse.com/780897" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-3136" }, { "cve": "CVE-2012-3143", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3143" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-5089.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3143", "url": "https://www.suse.com/security/cve/CVE-2012-3143" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-3143", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-3143", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-3143", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-3143", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-3143" }, { "cve": "CVE-2012-3159", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3159" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1533.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3159", "url": "https://www.suse.com/security/cve/CVE-2012-3159" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-3159", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-3159", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-3159", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-3159", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2012-3159" }, { "cve": "CVE-2012-3174", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3174" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3174", "url": "https://www.suse.com/security/cve/CVE-2012-3174" }, { "category": "external", "summary": "SUSE Bug 798324 for CVE-2012-3174", "url": "https://bugzilla.suse.com/798324" }, { "category": "external", "summary": "SUSE Bug 798521 for CVE-2012-3174", "url": "https://bugzilla.suse.com/798521" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2012-3174", "url": "https://bugzilla.suse.com/798535" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-3174" }, { "cve": "CVE-2012-3213", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3213" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3213", "url": "https://www.suse.com/security/cve/CVE-2012-3213" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2012-3213", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2012-3213", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2012-3213", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-3213" }, { "cve": "CVE-2012-3216", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3216" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3216", "url": "https://www.suse.com/security/cve/CVE-2012-3216" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-3216", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-3216", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-3216", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-3216", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-3216" }, { "cve": "CVE-2012-3342", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-3342" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-3342", "url": "https://www.suse.com/security/cve/CVE-2012-3342" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2012-3342", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2012-3342", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2012-3342", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-3342" }, { "cve": "CVE-2012-4681", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-4681" } ], "notes": [ { "category": "general", "text": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-4681", "url": "https://www.suse.com/security/cve/CVE-2012-4681" }, { "category": "external", "summary": "SUSE Bug 777499 for CVE-2012-4681", "url": "https://bugzilla.suse.com/777499" }, { "category": "external", "summary": "SUSE Bug 778629 for CVE-2012-4681", "url": "https://bugzilla.suse.com/778629" }, { "category": "external", "summary": "SUSE Bug 780897 for CVE-2012-4681", "url": "https://bugzilla.suse.com/780897" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-4681", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-4681", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-4681", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 798324 for CVE-2012-4681", "url": "https://bugzilla.suse.com/798324" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-4681" }, { "cve": "CVE-2012-5067", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5067" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5067", "url": "https://www.suse.com/security/cve/CVE-2012-5067" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5067", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5067", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5067", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5067", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-5067" }, { "cve": "CVE-2012-5069", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5069" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5069", "url": "https://www.suse.com/security/cve/CVE-2012-5069" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5069", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5069", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5069", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5069", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5069" }, { "cve": "CVE-2012-5070", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5070" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5070", "url": "https://www.suse.com/security/cve/CVE-2012-5070" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5070", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5070", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5070", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5070", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5070" }, { "cve": "CVE-2012-5071", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5071" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5071", "url": "https://www.suse.com/security/cve/CVE-2012-5071" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5071", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5071", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5071", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5071", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5071" }, { "cve": "CVE-2012-5072", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5072" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5072", "url": "https://www.suse.com/security/cve/CVE-2012-5072" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5072", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5072", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5072", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5072", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5072" }, { "cve": "CVE-2012-5073", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5073" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5079.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5073", "url": "https://www.suse.com/security/cve/CVE-2012-5073" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5073", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5073", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5073", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5073", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5073" }, { "cve": "CVE-2012-5074", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5074" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5074", "url": "https://www.suse.com/security/cve/CVE-2012-5074" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5074", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5074", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5074", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5074", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5074" }, { "cve": "CVE-2012-5075", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5075" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5075", "url": "https://www.suse.com/security/cve/CVE-2012-5075" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5075", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5075", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5075", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5075", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5075" }, { "cve": "CVE-2012-5076", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5076" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5076", "url": "https://www.suse.com/security/cve/CVE-2012-5076" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5076", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5076", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5076", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5076", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5076" }, { "cve": "CVE-2012-5077", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5077" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Security.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5077", "url": "https://www.suse.com/security/cve/CVE-2012-5077" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5077", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5077", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5077", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5077", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5077" }, { "cve": "CVE-2012-5079", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5079" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5073.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5079", "url": "https://www.suse.com/security/cve/CVE-2012-5079" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5079", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5079", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5079", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5079", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5079" }, { "cve": "CVE-2012-5081", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5081" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5081", "url": "https://www.suse.com/security/cve/CVE-2012-5081" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5081", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5081", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5081", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5081", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2012-5081" }, { "cve": "CVE-2012-5083", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5083" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5083", "url": "https://www.suse.com/security/cve/CVE-2012-5083" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5083", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5083", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5083", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5083", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5083" }, { "cve": "CVE-2012-5084", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5084" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5084", "url": "https://www.suse.com/security/cve/CVE-2012-5084" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5084", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5084", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5084", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5084", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5084" }, { "cve": "CVE-2012-5086", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5086" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5086", "url": "https://www.suse.com/security/cve/CVE-2012-5086" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5086", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5086", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5086", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5086", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5086" }, { "cve": "CVE-2012-5087", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5087" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5087", "url": "https://www.suse.com/security/cve/CVE-2012-5087" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5087", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5087", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5087", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5087", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5087" }, { "cve": "CVE-2012-5088", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5088" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5088", "url": "https://www.suse.com/security/cve/CVE-2012-5088" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5088", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5088", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5088", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5088", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5088" }, { "cve": "CVE-2012-5089", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-5089" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-3143.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-5089", "url": "https://www.suse.com/security/cve/CVE-2012-5089" }, { "category": "external", "summary": "SUSE Bug 785429 for CVE-2012-5089", "url": "https://bugzilla.suse.com/785429" }, { "category": "external", "summary": "SUSE Bug 785433 for CVE-2012-5089", "url": "https://bugzilla.suse.com/785433" }, { "category": "external", "summary": "SUSE Bug 785814 for CVE-2012-5089", "url": "https://bugzilla.suse.com/785814" }, { "category": "external", "summary": "SUSE Bug 788750 for CVE-2012-5089", "url": "https://bugzilla.suse.com/788750" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2012-5089" }, { "cve": "CVE-2013-0169", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0169" } ], "notes": [ { "category": "general", "text": "The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0169", "url": "https://www.suse.com/security/cve/CVE-2013-0169" }, { "category": "external", "summary": "SUSE Bug 1070148 for CVE-2013-0169", "url": "https://bugzilla.suse.com/1070148" }, { "category": "external", "summary": "SUSE Bug 1103036 for CVE-2013-0169", "url": "https://bugzilla.suse.com/1103036" }, { "category": "external", "summary": "SUSE Bug 1103597 for CVE-2013-0169", "url": "https://bugzilla.suse.com/1103597" }, { "category": "external", "summary": "SUSE Bug 802184 for CVE-2013-0169", "url": "https://bugzilla.suse.com/802184" }, { "category": "external", "summary": "SUSE Bug 802648 for CVE-2013-0169", "url": "https://bugzilla.suse.com/802648" }, { "category": "external", "summary": "SUSE Bug 802746 for CVE-2013-0169", "url": "https://bugzilla.suse.com/802746" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0169", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 804654 for CVE-2013-0169", "url": "https://bugzilla.suse.com/804654" }, { "category": "external", "summary": "SUSE Bug 809839 for CVE-2013-0169", "url": "https://bugzilla.suse.com/809839" }, { "category": "external", "summary": "SUSE Bug 813366 for CVE-2013-0169", "url": "https://bugzilla.suse.com/813366" }, { "category": "external", "summary": "SUSE Bug 813939 for CVE-2013-0169", "url": "https://bugzilla.suse.com/813939" }, { "category": "external", "summary": "SUSE Bug 821818 for CVE-2013-0169", "url": "https://bugzilla.suse.com/821818" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2013-0169", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 977584 for CVE-2013-0169", "url": "https://bugzilla.suse.com/977584" }, { "category": "external", "summary": "SUSE Bug 977616 for CVE-2013-0169", "url": "https://bugzilla.suse.com/977616" }, { "category": "external", "summary": "SUSE Bug 984977 for CVE-2013-0169", "url": "https://bugzilla.suse.com/984977" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2013-0169" }, { "cve": "CVE-2013-0351", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0351" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0351", "url": "https://www.suse.com/security/cve/CVE-2013-0351" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0351", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0351", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0351", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0351" }, { "cve": "CVE-2013-0401", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0401" } ], "notes": [ { "category": "general", "text": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0401", "url": "https://www.suse.com/security/cve/CVE-2013-0401" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-0401", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-0401", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-0401", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0401" }, { "cve": "CVE-2013-0409", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0409" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0409", "url": "https://www.suse.com/security/cve/CVE-2013-0409" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0409", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0409", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0409", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0409" }, { "cve": "CVE-2013-0419", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0419" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0419", "url": "https://www.suse.com/security/cve/CVE-2013-0419" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0419", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0419", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0419", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0419" }, { "cve": "CVE-2013-0422", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0422" } ], "notes": [ { "category": "general", "text": "Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0422", "url": "https://www.suse.com/security/cve/CVE-2013-0422" }, { "category": "external", "summary": "SUSE Bug 798324 for CVE-2013-0422", "url": "https://bugzilla.suse.com/798324" }, { "category": "external", "summary": "SUSE Bug 798521 for CVE-2013-0422", "url": "https://bugzilla.suse.com/798521" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0422", "url": "https://bugzilla.suse.com/798535" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0422" }, { "cve": "CVE-2013-0423", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0423" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0423", "url": "https://www.suse.com/security/cve/CVE-2013-0423" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0423", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0423", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0423", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0423" }, { "cve": "CVE-2013-0424", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0424" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0424", "url": "https://www.suse.com/security/cve/CVE-2013-0424" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0424", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0424", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0424", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0424", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0424" }, { "cve": "CVE-2013-0425", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0425" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0428 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect \"access control checks\" in the logging API that allow remote attackers to bypass Java sandbox restrictions.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0425", "url": "https://www.suse.com/security/cve/CVE-2013-0425" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0425", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0425", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0425", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0425", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0425" }, { "cve": "CVE-2013-0426", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0426" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect \"access control checks\" in the logging API that allow remote attackers to bypass Java sandbox restrictions.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0426", "url": "https://www.suse.com/security/cve/CVE-2013-0426" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0426", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0426", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0426", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0426", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0426" }, { "cve": "CVE-2013-0427", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0427" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0427", "url": "https://www.suse.com/security/cve/CVE-2013-0427" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0427", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0427", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0427", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0427", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0427" }, { "cve": "CVE-2013-0428", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0428" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"incorrect checks for proxy classes\" in the Reflection API.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0428", "url": "https://www.suse.com/security/cve/CVE-2013-0428" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0428", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0428", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0428", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0428", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0428" }, { "cve": "CVE-2013-0431", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0431" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka \"Issue 52,\" a different vulnerability than CVE-2013-1490.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0431", "url": "https://www.suse.com/security/cve/CVE-2013-0431" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0431", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0431", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0431", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0431" }, { "cve": "CVE-2013-0432", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0432" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient clipboard access premission checks.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0432", "url": "https://www.suse.com/security/cve/CVE-2013-0432" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0432", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0432", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0432", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0432", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0432" }, { "cve": "CVE-2013-0433", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0433" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddress data.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0433", "url": "https://www.suse.com/security/cve/CVE-2013-0433" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0433", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0433", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0433", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0433", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0433" }, { "cve": "CVE-2013-0434", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0434" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0434", "url": "https://www.suse.com/security/cve/CVE-2013-0434" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0434", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0434", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0434", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0434", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0434" }, { "cve": "CVE-2013-0435", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0435" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and \"Better handling of UI elements.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0435", "url": "https://www.suse.com/security/cve/CVE-2013-0435" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0435", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0435", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0435", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0435", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0435" }, { "cve": "CVE-2013-0437", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0437" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0437", "url": "https://www.suse.com/security/cve/CVE-2013-0437" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0437", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0437", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0437", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0437" }, { "cve": "CVE-2013-0438", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0438" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0438", "url": "https://www.suse.com/security/cve/CVE-2013-0438" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0438", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0438", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0438", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0438" }, { "cve": "CVE-2013-0440", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0440" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect availability via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to CPU consumption in the SSL/TLS implementation via a large number of ClientHello packets that are not properly handled by (1) ClientHandshaker.java and (2) ServerHandshaker.java.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0440", "url": "https://www.suse.com/security/cve/CVE-2013-0440" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0440", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0440", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0440", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0440", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0440" }, { "cve": "CVE-2013-0441", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0441" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-1476 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via certain methods that should not be serialized, aka \"missing serialization restriction.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0441", "url": "https://www.suse.com/security/cve/CVE-2013-0441" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0441", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0441", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0441", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0441", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0441" }, { "cve": "CVE-2013-0442", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0442" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of \"privileges of the code\" that bypasses the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0442", "url": "https://www.suse.com/security/cve/CVE-2013-0442" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0442", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0442", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0442", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0442", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0442" }, { "cve": "CVE-2013-0443", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0443" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect validation of Diffie-Hellman keys, which allows remote attackers to conduct a \"small subgroup attack\" to force the use of weak session keys or obtain sensitive information about the private key.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0443", "url": "https://www.suse.com/security/cve/CVE-2013-0443" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0443", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0443", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0443", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0443", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0443" }, { "cve": "CVE-2013-0444", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0444" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient checks for cached results\" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0444", "url": "https://www.suse.com/security/cve/CVE-2013-0444" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0444", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0444", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0444", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0444" }, { "cve": "CVE-2013-0445", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0445" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of \"privileges of the code\" that bypasses the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0445", "url": "https://www.suse.com/security/cve/CVE-2013-0445" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0445", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0445", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0445", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0445" }, { "cve": "CVE-2013-0446", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0446" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0446", "url": "https://www.suse.com/security/cve/CVE-2013-0446" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0446", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0446", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0446", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0446" }, { "cve": "CVE-2013-0449", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0449" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0449", "url": "https://www.suse.com/security/cve/CVE-2013-0449" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0449", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0449", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0449", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0449" }, { "cve": "CVE-2013-0450", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0450" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of \"access control context\" in the JMX RequiredModelMBean class.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0450", "url": "https://www.suse.com/security/cve/CVE-2013-0450" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-0450", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-0450", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0450", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0450", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0450" }, { "cve": "CVE-2013-0485", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0485" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0485", "url": "https://www.suse.com/security/cve/CVE-2013-0485" }, { "category": "external", "summary": "SUSE Bug 813939 for CVE-2013-0485", "url": "https://bugzilla.suse.com/813939" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0485" }, { "cve": "CVE-2013-0809", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0809" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0809", "url": "https://www.suse.com/security/cve/CVE-2013-0809" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-0809", "url": "https://bugzilla.suse.com/806786" }, { "category": "external", "summary": "SUSE Bug 807487 for CVE-2013-0809", "url": "https://bugzilla.suse.com/807487" }, { "category": "external", "summary": "SUSE Bug 809386 for CVE-2013-0809", "url": "https://bugzilla.suse.com/809386" }, { "category": "external", "summary": "SUSE Bug 813939 for CVE-2013-0809", "url": "https://bugzilla.suse.com/813939" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-0809" }, { "cve": "CVE-2013-1473", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1473" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1473", "url": "https://www.suse.com/security/cve/CVE-2013-1473" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1473", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1473", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-1473", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1473" }, { "cve": "CVE-2013-1476", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1476" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via \"certain value handler constructors.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1476", "url": "https://www.suse.com/security/cve/CVE-2013-1476" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1476", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-1476", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1476", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-1476", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1476" }, { "cve": "CVE-2013-1478", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1478" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient validation of raster parameters\" that can trigger an integer overflow and memory corruption.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1478", "url": "https://www.suse.com/security/cve/CVE-2013-1478" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1478", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-1478", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1478", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-1478", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1478" }, { "cve": "CVE-2013-1480", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1480" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient validation of raster parameters\" in awt_parseImage.c, which triggers memory corruption.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1480", "url": "https://www.suse.com/security/cve/CVE-2013-1480" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1480", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 801972 for CVE-2013-1480", "url": "https://bugzilla.suse.com/801972" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1480", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-1480", "url": "https://bugzilla.suse.com/806786" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1480" }, { "cve": "CVE-2013-1484", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1484" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1484", "url": "https://www.suse.com/security/cve/CVE-2013-1484" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1484", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1484", "url": "https://bugzilla.suse.com/803379" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1484" }, { "cve": "CVE-2013-1485", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1485" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1485", "url": "https://www.suse.com/security/cve/CVE-2013-1485" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1485", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1485", "url": "https://bugzilla.suse.com/803379" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-1485" }, { "cve": "CVE-2013-1486", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1486" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1486", "url": "https://www.suse.com/security/cve/CVE-2013-1486" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1486", "url": "https://bugzilla.suse.com/798535" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-1486", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 804654 for CVE-2013-1486", "url": "https://bugzilla.suse.com/804654" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1486" }, { "cve": "CVE-2013-1487", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1487" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1487", "url": "https://www.suse.com/security/cve/CVE-2013-1487" }, { "category": "external", "summary": "SUSE Bug 798535 for CVE-2013-1487", "url": "https://bugzilla.suse.com/798535" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1487" }, { "cve": "CVE-2013-1491", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1491" } ], "notes": [ { "category": "general", "text": "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1491", "url": "https://www.suse.com/security/cve/CVE-2013-1491" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-1491", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1491" }, { "cve": "CVE-2013-1493", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1493" } ], "notes": [ { "category": "general", "text": "The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1493", "url": "https://www.suse.com/security/cve/CVE-2013-1493" }, { "category": "external", "summary": "SUSE Bug 806786 for CVE-2013-1493", "url": "https://bugzilla.suse.com/806786" }, { "category": "external", "summary": "SUSE Bug 807487 for CVE-2013-1493", "url": "https://bugzilla.suse.com/807487" }, { "category": "external", "summary": "SUSE Bug 809386 for CVE-2013-1493", "url": "https://bugzilla.suse.com/809386" }, { "category": "external", "summary": "SUSE Bug 813939 for CVE-2013-1493", "url": "https://bugzilla.suse.com/813939" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1493" }, { "cve": "CVE-2013-1500", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1500" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1500", "url": "https://www.suse.com/security/cve/CVE-2013-1500" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-1500", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-1500", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-1500", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-1500", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-1500" }, { "cve": "CVE-2013-1537", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1537" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform \"dynamic class downloading\" and execute arbitrary code.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1537", "url": "https://www.suse.com/security/cve/CVE-2013-1537" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-1537", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-1537", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-1537", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1537" }, { "cve": "CVE-2013-1540", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1540" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1540", "url": "https://www.suse.com/security/cve/CVE-2013-1540" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-1540", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-1540" }, { "cve": "CVE-2013-1557", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1557" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"missing security restrictions\" in the LogStream.setDefaultStream method.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1557", "url": "https://www.suse.com/security/cve/CVE-2013-1557" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-1557", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-1557", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-1557", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1557" }, { "cve": "CVE-2013-1563", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1563" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1563", "url": "https://www.suse.com/security/cve/CVE-2013-1563" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-1563", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-1563" }, { "cve": "CVE-2013-1569", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1569" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"checking of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1569", "url": "https://www.suse.com/security/cve/CVE-2013-1569" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-1569", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-1569", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-1569", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-1569" }, { "cve": "CVE-2013-1571", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-1571" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-1571", "url": "https://www.suse.com/security/cve/CVE-2013-1571" }, { "category": "external", "summary": "SUSE Bug 824397 for CVE-2013-1571", "url": "https://bugzilla.suse.com/824397" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-1571", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-1571", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-1571", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-1571", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-1571" }, { "cve": "CVE-2013-2383", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2383" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"handling of [a] glyph table\" in the International Components for Unicode (ICU) Layout Engine before 51.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2383", "url": "https://www.suse.com/security/cve/CVE-2013-2383" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2383", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2383", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2383", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2383" }, { "cve": "CVE-2013-2384", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2384" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font layout\" in the International Components for Unicode (ICU) Layout Engine before 51.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2384", "url": "https://www.suse.com/security/cve/CVE-2013-2384" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2384", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2384", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2384", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2384" }, { "cve": "CVE-2013-2394", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2394" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2394", "url": "https://www.suse.com/security/cve/CVE-2013-2394" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2394", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2394" }, { "cve": "CVE-2013-2400", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2400" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2400", "url": "https://www.suse.com/security/cve/CVE-2013-2400" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2400", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2400", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2400" }, { "cve": "CVE-2013-2407", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2407" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"XML security and the class loader.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2407", "url": "https://www.suse.com/security/cve/CVE-2013-2407" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2407", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2407", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2407", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2407", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2407" }, { "cve": "CVE-2013-2412", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2412" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2412", "url": "https://www.suse.com/security/cve/CVE-2013-2412" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2412", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2412", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2412", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2412", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2412" }, { "cve": "CVE-2013-2417", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2417" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2417", "url": "https://www.suse.com/security/cve/CVE-2013-2417" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2417", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2417", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2417", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2417" }, { "cve": "CVE-2013-2418", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2418" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2418", "url": "https://www.suse.com/security/cve/CVE-2013-2418" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2418", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2418" }, { "cve": "CVE-2013-2419", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2419" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"font processing errors\" in the International Components for Unicode (ICU) Layout Engine before 51.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2419", "url": "https://www.suse.com/security/cve/CVE-2013-2419" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2419", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2419", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2419", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2419" }, { "cve": "CVE-2013-2420", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2420" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient \"validation of images\" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2420", "url": "https://www.suse.com/security/cve/CVE-2013-2420" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2420", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2420", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2420", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2420" }, { "cve": "CVE-2013-2422", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2422" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2422", "url": "https://www.suse.com/security/cve/CVE-2013-2422" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2422", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2422", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2422", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2422" }, { "cve": "CVE-2013-2424", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2424" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient class access checks\" when \"creating new instances\" using MBeanInstantiator.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2424", "url": "https://www.suse.com/security/cve/CVE-2013-2424" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2424", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2424", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2424", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2424" }, { "cve": "CVE-2013-2429", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2429" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageWriter state corruption\" when using native code, which triggers memory corruption.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2429", "url": "https://www.suse.com/security/cve/CVE-2013-2429" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2429", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2429", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2429", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2429" }, { "cve": "CVE-2013-2430", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2430" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"JPEGImageReader state corruption\" when using native code.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2430", "url": "https://www.suse.com/security/cve/CVE-2013-2430" }, { "category": "external", "summary": "SUSE Bug 816720 for CVE-2013-2430", "url": "https://bugzilla.suse.com/816720" }, { "category": "external", "summary": "SUSE Bug 817157 for CVE-2013-2430", "url": "https://bugzilla.suse.com/817157" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2430", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2430" }, { "cve": "CVE-2013-2432", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2432" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2432", "url": "https://www.suse.com/security/cve/CVE-2013-2432" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2432", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2432" }, { "cve": "CVE-2013-2433", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2433" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2433", "url": "https://www.suse.com/security/cve/CVE-2013-2433" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2433", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2433" }, { "cve": "CVE-2013-2435", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2435" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2435", "url": "https://www.suse.com/security/cve/CVE-2013-2435" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2435", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2435" }, { "cve": "CVE-2013-2437", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2437" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2437", "url": "https://www.suse.com/security/cve/CVE-2013-2437" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2437", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2437", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2437" }, { "cve": "CVE-2013-2440", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2440" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2440", "url": "https://www.suse.com/security/cve/CVE-2013-2440" }, { "category": "external", "summary": "SUSE Bug 819288 for CVE-2013-2440", "url": "https://bugzilla.suse.com/819288" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2440" }, { "cve": "CVE-2013-2442", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2442" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2442", "url": "https://www.suse.com/security/cve/CVE-2013-2442" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2442", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2442", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2442" }, { "cve": "CVE-2013-2443", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2443" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect \"checking order\" within the AccessControlContext class.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2443", "url": "https://www.suse.com/security/cve/CVE-2013-2443" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2443", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2443", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2443", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2443", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2443" }, { "cve": "CVE-2013-2444", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2444" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not \"properly manage and restrict certain resources related to the processing of fonts,\" possibly involving temporary files.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2444", "url": "https://www.suse.com/security/cve/CVE-2013-2444" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2444", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2444", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2444", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2444", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2444" }, { "cve": "CVE-2013-2446", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2446" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2446", "url": "https://www.suse.com/security/cve/CVE-2013-2446" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2446", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2446", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2446", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2446", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2446" }, { "cve": "CVE-2013-2447", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2447" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket\u0027s local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2447", "url": "https://www.suse.com/security/cve/CVE-2013-2447" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2447", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2447", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2447", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2447", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2447" }, { "cve": "CVE-2013-2448", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2448" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient \"access restrictions\" and \"robustness of sound classes.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2448", "url": "https://www.suse.com/security/cve/CVE-2013-2448" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2448", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2448", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2448", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2448", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-2448" }, { "cve": "CVE-2013-2449", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2449" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2449", "url": "https://www.suse.com/security/cve/CVE-2013-2449" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2449", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2449", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2449", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2449" }, { "cve": "CVE-2013-2450", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2450" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2450", "url": "https://www.suse.com/security/cve/CVE-2013-2450" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2450", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2450", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2450", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2450", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2450" }, { "cve": "CVE-2013-2451", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2451" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2451", "url": "https://www.suse.com/security/cve/CVE-2013-2451" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2451", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2451", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2451", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2451", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2013-2451" }, { "cve": "CVE-2013-2452", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2452" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"network address handling in virtual machine identifiers\" and the lack of \"unique and unpredictable IDs\" in the java.rmi.dgc.VMID class.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2452", "url": "https://www.suse.com/security/cve/CVE-2013-2452" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2452", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2452", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2452", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2452", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2452" }, { "cve": "CVE-2013-2453", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2453" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for \"package access\" by the MBeanServer Introspector.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2453", "url": "https://www.suse.com/security/cve/CVE-2013-2453" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2453", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2453", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2453", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2453", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2453" }, { "cve": "CVE-2013-2454", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2454" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2454", "url": "https://www.suse.com/security/cve/CVE-2013-2454" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2454", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2454", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2454", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2454" }, { "cve": "CVE-2013-2455", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2455" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2455", "url": "https://www.suse.com/security/cve/CVE-2013-2455" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2455", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2455", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2455", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2455", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2455" }, { "cve": "CVE-2013-2456", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2456" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2456", "url": "https://www.suse.com/security/cve/CVE-2013-2456" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2456", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2456", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2456", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2456", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2456" }, { "cve": "CVE-2013-2457", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2457" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of \"certain class checks\" that allows remote attackers to bypass intended class restrictions.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2457", "url": "https://www.suse.com/security/cve/CVE-2013-2457" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2457", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2457", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2457", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2457", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2457" }, { "cve": "CVE-2013-2458", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2458" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via \"an error related to method handles.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2458", "url": "https://www.suse.com/security/cve/CVE-2013-2458" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2458", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2458", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2458", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-2458" }, { "cve": "CVE-2013-2459", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2459" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"integer overflow checks.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2459", "url": "https://www.suse.com/security/cve/CVE-2013-2459" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2459", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2459", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2459", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2459", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2459" }, { "cve": "CVE-2013-2460", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2460" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"insufficient access checks\" in the tracing component.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2460", "url": "https://www.suse.com/security/cve/CVE-2013-2460" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2460", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2460", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2460", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2460" }, { "cve": "CVE-2013-2462", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2462" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2462", "url": "https://www.suse.com/security/cve/CVE-2013-2462" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2462", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2462", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2462" }, { "cve": "CVE-2013-2463", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2463" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image attribute verification\" in 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2463", "url": "https://www.suse.com/security/cve/CVE-2013-2463" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2463", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2463", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2463", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2463", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2463" }, { "cve": "CVE-2013-2464", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2464" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2464", "url": "https://www.suse.com/security/cve/CVE-2013-2464" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2464", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2464", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2464" }, { "cve": "CVE-2013-2465", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2465" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2465", "url": "https://www.suse.com/security/cve/CVE-2013-2465" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2465", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2465", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2465", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2465", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2465" }, { "cve": "CVE-2013-2466", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2466" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2466", "url": "https://www.suse.com/security/cve/CVE-2013-2466" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2466", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2466", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2466" }, { "cve": "CVE-2013-2468", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2468" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2468", "url": "https://www.suse.com/security/cve/CVE-2013-2468" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2468", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2468", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2468" }, { "cve": "CVE-2013-2469", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2469" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image layout verification\" in 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2469", "url": "https://www.suse.com/security/cve/CVE-2013-2469" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2469", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2469", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2469", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2469", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2469" }, { "cve": "CVE-2013-2470", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2470" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"ImagingLib byte lookup processing.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2470", "url": "https://www.suse.com/security/cve/CVE-2013-2470" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2470", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2470", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2470", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2470", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2470" }, { "cve": "CVE-2013-2471", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2471" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect IntegerComponentRaster size checks.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2471", "url": "https://www.suse.com/security/cve/CVE-2013-2471" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2471", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2471", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2471", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2471", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2471" }, { "cve": "CVE-2013-2472", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2472" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ShortBandedRaster size checks\" in 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2472", "url": "https://www.suse.com/security/cve/CVE-2013-2472" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2472", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2472", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2472", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2472", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2472" }, { "cve": "CVE-2013-2473", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-2473" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect ByteBandedRaster size checks\" in 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-2473", "url": "https://www.suse.com/security/cve/CVE-2013-2473" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-2473", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 828665 for CVE-2013-2473", "url": "https://bugzilla.suse.com/828665" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-2473", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 829708 for CVE-2013-2473", "url": "https://bugzilla.suse.com/829708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-2473" }, { "cve": "CVE-2013-3006", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3006" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3006", "url": "https://www.suse.com/security/cve/CVE-2013-3006" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3006", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3006" }, { "cve": "CVE-2013-3007", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3007" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3007", "url": "https://www.suse.com/security/cve/CVE-2013-3007" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3007", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3007" }, { "cve": "CVE-2013-3008", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3008" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3008", "url": "https://www.suse.com/security/cve/CVE-2013-3008" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3008", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3008" }, { "cve": "CVE-2013-3009", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3009" } ], "notes": [ { "category": "general", "text": "The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3009", "url": "https://www.suse.com/security/cve/CVE-2013-3009" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3009", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 977650 for CVE-2013-3009", "url": "https://bugzilla.suse.com/977650" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3009" }, { "cve": "CVE-2013-3010", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3010" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3007.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3010", "url": "https://www.suse.com/security/cve/CVE-2013-3010" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3010", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3010" }, { "cve": "CVE-2013-3011", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3011" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3011", "url": "https://www.suse.com/security/cve/CVE-2013-3011" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3011", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3011" }, { "cve": "CVE-2013-3012", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3012" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3011.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3012", "url": "https://www.suse.com/security/cve/CVE-2013-3012" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3012", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-3012" }, { "cve": "CVE-2013-3743", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3743" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3743", "url": "https://www.suse.com/security/cve/CVE-2013-3743" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-3743", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3743", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-3743" }, { "cve": "CVE-2013-3744", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3744" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3744", "url": "https://www.suse.com/security/cve/CVE-2013-3744" }, { "category": "external", "summary": "SUSE Bug 825624 for CVE-2013-3744", "url": "https://bugzilla.suse.com/825624" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-3744", "url": "https://bugzilla.suse.com/829212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-3744" }, { "cve": "CVE-2013-3829", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-3829" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-3829", "url": "https://www.suse.com/security/cve/CVE-2013-3829" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-3829", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-3829", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-3829", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-3829", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-3829" }, { "cve": "CVE-2013-4002", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-4002" } ], "notes": [ { "category": "general", "text": "XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-4002", "url": "https://www.suse.com/security/cve/CVE-2013-4002" }, { "category": "external", "summary": "SUSE Bug 829212 for CVE-2013-4002", "url": "https://bugzilla.suse.com/829212" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-4002", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-4002", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-4002", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-4002", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-4002" }, { "cve": "CVE-2013-4041", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-4041" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-4041", "url": "https://www.suse.com/security/cve/CVE-2013-4041" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-4041", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-4041" }, { "cve": "CVE-2013-5372", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5372" } ], "notes": [ { "category": "general", "text": "The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5372", "url": "https://www.suse.com/security/cve/CVE-2013-5372" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5372", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5372" }, { "cve": "CVE-2013-5375", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5375" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5375", "url": "https://www.suse.com/security/cve/CVE-2013-5375" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5375", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5375" }, { "cve": "CVE-2013-5456", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5456" } ], "notes": [ { "category": "general", "text": "The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5456", "url": "https://www.suse.com/security/cve/CVE-2013-5456" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5456", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 977646 for CVE-2013-5456", "url": "https://bugzilla.suse.com/977646" }, { "category": "external", "summary": "SUSE Bug 981057 for CVE-2013-5456", "url": "https://bugzilla.suse.com/981057" }, { "category": "external", "summary": "SUSE Bug 981060 for CVE-2013-5456", "url": "https://bugzilla.suse.com/981060" }, { "category": "external", "summary": "SUSE Bug 981087 for CVE-2013-5456", "url": "https://bugzilla.suse.com/981087" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5456" }, { "cve": "CVE-2013-5457", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5457" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5457", "url": "https://www.suse.com/security/cve/CVE-2013-5457" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5457", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5457" }, { "cve": "CVE-2013-5458", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5458" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5458", "url": "https://www.suse.com/security/cve/CVE-2013-5458" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5458", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5458" }, { "cve": "CVE-2013-5772", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5772" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5772", "url": "https://www.suse.com/security/cve/CVE-2013-5772" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5772", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5772", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5772", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5772", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2013-5772" }, { "cve": "CVE-2013-5774", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5774" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5774", "url": "https://www.suse.com/security/cve/CVE-2013-5774" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5774", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5774", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5774", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5774", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5774" }, { "cve": "CVE-2013-5776", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5776" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5776", "url": "https://www.suse.com/security/cve/CVE-2013-5776" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5776", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5776", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5776" }, { "cve": "CVE-2013-5778", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5778" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5778", "url": "https://www.suse.com/security/cve/CVE-2013-5778" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5778", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5778", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5778", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5778", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5778" }, { "cve": "CVE-2013-5780", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5780" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5780", "url": "https://www.suse.com/security/cve/CVE-2013-5780" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5780", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5780", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5780", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5780", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5780" }, { "cve": "CVE-2013-5782", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5782" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5782", "url": "https://www.suse.com/security/cve/CVE-2013-5782" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5782", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5782", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5782", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5782", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5782" }, { "cve": "CVE-2013-5783", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5783" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5783", "url": "https://www.suse.com/security/cve/CVE-2013-5783" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5783", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5783", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5783", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5783", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5783" }, { "cve": "CVE-2013-5784", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5784" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5784", "url": "https://www.suse.com/security/cve/CVE-2013-5784" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5784", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5784", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5784", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5784", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5784" }, { "cve": "CVE-2013-5787", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5787" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5787", "url": "https://www.suse.com/security/cve/CVE-2013-5787" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5787", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5787", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5787" }, { "cve": "CVE-2013-5788", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5788" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5788", "url": "https://www.suse.com/security/cve/CVE-2013-5788" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5788", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5788", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5788" }, { "cve": "CVE-2013-5789", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5789" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5789", "url": "https://www.suse.com/security/cve/CVE-2013-5789" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5789", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5789", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5789" }, { "cve": "CVE-2013-5790", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5790" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5790", "url": "https://www.suse.com/security/cve/CVE-2013-5790" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5790", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5790", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5790", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5790", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5790" }, { "cve": "CVE-2013-5797", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5797" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5797", "url": "https://www.suse.com/security/cve/CVE-2013-5797" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5797", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5797", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5797", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5797", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2013-5797" }, { "cve": "CVE-2013-5800", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5800" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5800", "url": "https://www.suse.com/security/cve/CVE-2013-5800" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5800", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5800", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5800", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5800" }, { "cve": "CVE-2013-5801", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5801" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5801", "url": "https://www.suse.com/security/cve/CVE-2013-5801" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5801", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5801", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5801" }, { "cve": "CVE-2013-5802", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5802" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5802", "url": "https://www.suse.com/security/cve/CVE-2013-5802" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5802", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5802", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5802", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5802", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5802" }, { "cve": "CVE-2013-5803", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5803" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5803", "url": "https://www.suse.com/security/cve/CVE-2013-5803" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5803", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5803", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5803", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5803", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-5803" }, { "cve": "CVE-2013-5804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5804" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5804", "url": "https://www.suse.com/security/cve/CVE-2013-5804" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5804", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5804", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5804", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5804", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5804" }, { "cve": "CVE-2013-5809", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5809" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5809", "url": "https://www.suse.com/security/cve/CVE-2013-5809" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5809", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5809", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5809", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5809", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5809" }, { "cve": "CVE-2013-5812", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5812" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5812", "url": "https://www.suse.com/security/cve/CVE-2013-5812" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5812", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5812", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5812" }, { "cve": "CVE-2013-5814", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5814" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5814", "url": "https://www.suse.com/security/cve/CVE-2013-5814" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5814", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5814", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5814", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5814", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5814" }, { "cve": "CVE-2013-5817", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5817" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5817", "url": "https://www.suse.com/security/cve/CVE-2013-5817" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5817", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5817", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5817", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5817", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5817" }, { "cve": "CVE-2013-5818", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5818" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5819 and CVE-2013-5831.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5818", "url": "https://www.suse.com/security/cve/CVE-2013-5818" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5818", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5818", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5818" }, { "cve": "CVE-2013-5819", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5819" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5819", "url": "https://www.suse.com/security/cve/CVE-2013-5819" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5819", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5819", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5819" }, { "cve": "CVE-2013-5820", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5820" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5820", "url": "https://www.suse.com/security/cve/CVE-2013-5820" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5820", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5820", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5820", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5820", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5820" }, { "cve": "CVE-2013-5823", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5823" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5823", "url": "https://www.suse.com/security/cve/CVE-2013-5823" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5823", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5823", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5823", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5823", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5823" }, { "cve": "CVE-2013-5824", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5824" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5832, and CVE-2013-5852.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5824", "url": "https://www.suse.com/security/cve/CVE-2013-5824" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5824", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5824", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5824" }, { "cve": "CVE-2013-5825", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5825" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5825", "url": "https://www.suse.com/security/cve/CVE-2013-5825" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5825", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5825", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5825", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5825", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5825" }, { "cve": "CVE-2013-5829", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5829" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5829", "url": "https://www.suse.com/security/cve/CVE-2013-5829" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5829", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5829", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5829", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5829", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5829" }, { "cve": "CVE-2013-5830", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5830" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5830", "url": "https://www.suse.com/security/cve/CVE-2013-5830" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5830", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5830", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5830", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5830", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5830" }, { "cve": "CVE-2013-5831", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5831" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5819.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5831", "url": "https://www.suse.com/security/cve/CVE-2013-5831" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5831", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5831", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5831" }, { "cve": "CVE-2013-5832", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5832" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5852.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5832", "url": "https://www.suse.com/security/cve/CVE-2013-5832" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5832", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5832", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5832" }, { "cve": "CVE-2013-5838", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5838" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5838", "url": "https://www.suse.com/security/cve/CVE-2013-5838" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5838", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5838", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 972468 for CVE-2013-5838", "url": "https://bugzilla.suse.com/972468" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5838" }, { "cve": "CVE-2013-5840", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5840" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5840", "url": "https://www.suse.com/security/cve/CVE-2013-5840" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5840", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5840", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5840", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5840", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5840" }, { "cve": "CVE-2013-5842", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5842" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5842", "url": "https://www.suse.com/security/cve/CVE-2013-5842" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5842", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5842", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5842", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5842", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5842" }, { "cve": "CVE-2013-5843", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5843" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5843", "url": "https://www.suse.com/security/cve/CVE-2013-5843" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5843", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5843", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5843" }, { "cve": "CVE-2013-5848", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5848" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5848", "url": "https://www.suse.com/security/cve/CVE-2013-5848" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5848", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5848", "url": "https://bugzilla.suse.com/849212" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5848" }, { "cve": "CVE-2013-5849", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5849" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5849", "url": "https://www.suse.com/security/cve/CVE-2013-5849" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5849", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5849", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5849", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5849", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5849" }, { "cve": "CVE-2013-5850", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5850" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5850", "url": "https://www.suse.com/security/cve/CVE-2013-5850" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5850", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5850", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5850", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5850", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5850" }, { "cve": "CVE-2013-5851", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5851" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5851", "url": "https://www.suse.com/security/cve/CVE-2013-5851" }, { "category": "external", "summary": "SUSE Bug 846177 for CVE-2013-5851", "url": "https://bugzilla.suse.com/846177" }, { "category": "external", "summary": "SUSE Bug 846999 for CVE-2013-5851", "url": "https://bugzilla.suse.com/846999" }, { "category": "external", "summary": "SUSE Bug 849212 for CVE-2013-5851", "url": "https://bugzilla.suse.com/849212" }, { "category": "external", "summary": "SUSE Bug 852367 for CVE-2013-5851", "url": "https://bugzilla.suse.com/852367" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5851" }, { "cve": "CVE-2013-5878", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5878" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5878", "url": "https://www.suse.com/security/cve/CVE-2013-5878" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2013-5878", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5878", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2013-5878" }, { "cve": "CVE-2013-5884", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5884" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5884", "url": "https://www.suse.com/security/cve/CVE-2013-5884" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2013-5884", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5884", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5884" }, { "cve": "CVE-2013-5887", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5887" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5887", "url": "https://www.suse.com/security/cve/CVE-2013-5887" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5887", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5887" }, { "cve": "CVE-2013-5888", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5888" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5888", "url": "https://www.suse.com/security/cve/CVE-2013-5888" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5888", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5888" }, { "cve": "CVE-2013-5889", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5889" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5889", "url": "https://www.suse.com/security/cve/CVE-2013-5889" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5889", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5889" }, { "cve": "CVE-2013-5896", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5896" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5896", "url": "https://www.suse.com/security/cve/CVE-2013-5896" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2013-5896", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5896", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5896" }, { "cve": "CVE-2013-5898", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5898" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-0375 and CVE-2014-0403.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5898", "url": "https://www.suse.com/security/cve/CVE-2013-5898" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5898", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2013-5898" }, { "cve": "CVE-2013-5899", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5899" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5899", "url": "https://www.suse.com/security/cve/CVE-2013-5899" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5899", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5899" }, { "cve": "CVE-2013-5907", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5907" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5907", "url": "https://www.suse.com/security/cve/CVE-2013-5907" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2013-5907", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5907", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2013-5907" }, { "cve": "CVE-2013-5910", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-5910" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-5910", "url": "https://www.suse.com/security/cve/CVE-2013-5910" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2013-5910", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2013-5910", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-5910" }, { "cve": "CVE-2013-6629", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-6629" } ], "notes": [ { "category": "general", "text": "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-6629", "url": "https://www.suse.com/security/cve/CVE-2013-6629" }, { "category": "external", "summary": "SUSE Bug 850430 for CVE-2013-6629", "url": "https://bugzilla.suse.com/850430" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2013-6629", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2013-6629", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2013-6629", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2013-6629", "url": "https://bugzilla.suse.com/877430" }, { "category": "external", "summary": "SUSE Bug 880246 for CVE-2013-6629", "url": "https://bugzilla.suse.com/880246" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-6629" }, { "cve": "CVE-2013-6954", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-6954" } ], "notes": [ { "category": "general", "text": "The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-6954", "url": "https://www.suse.com/security/cve/CVE-2013-6954" }, { "category": "external", "summary": "SUSE Bug 856522 for CVE-2013-6954", "url": "https://bugzilla.suse.com/856522" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2013-6954", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2013-6954", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2013-6954", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2013-6954", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2013-6954" }, { "cve": "CVE-2014-0368", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0368" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0368", "url": "https://www.suse.com/security/cve/CVE-2014-0368" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0368", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0368", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0368" }, { "cve": "CVE-2014-0373", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0373" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0373", "url": "https://www.suse.com/security/cve/CVE-2014-0373" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0373", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0373", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2014-0373" }, { "cve": "CVE-2014-0375", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0375" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0375", "url": "https://www.suse.com/security/cve/CVE-2014-0375" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0375", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0375" }, { "cve": "CVE-2014-0376", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0376" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for \"code permissions when creating document builder factories.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0376", "url": "https://www.suse.com/security/cve/CVE-2014-0376" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0376", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0376", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0376" }, { "cve": "CVE-2014-0387", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0387" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0387", "url": "https://www.suse.com/security/cve/CVE-2014-0387" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0387", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2014-0387" }, { "cve": "CVE-2014-0403", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0403" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0403", "url": "https://www.suse.com/security/cve/CVE-2014-0403" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0403", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0403" }, { "cve": "CVE-2014-0410", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0410" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0410", "url": "https://www.suse.com/security/cve/CVE-2014-0410" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0410", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0410" }, { "cve": "CVE-2014-0411", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0411" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0411", "url": "https://www.suse.com/security/cve/CVE-2014-0411" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0411", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0411", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2014-0411" }, { "cve": "CVE-2014-0415", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0415" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0415", "url": "https://www.suse.com/security/cve/CVE-2014-0415" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0415", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0415" }, { "cve": "CVE-2014-0416", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0416" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0416", "url": "https://www.suse.com/security/cve/CVE-2014-0416" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0416", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0416", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0416" }, { "cve": "CVE-2014-0417", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0417" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0417", "url": "https://www.suse.com/security/cve/CVE-2014-0417" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0417", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0417" }, { "cve": "CVE-2014-0422", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0422" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0422", "url": "https://www.suse.com/security/cve/CVE-2014-0422" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0422", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0422", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0422" }, { "cve": "CVE-2014-0423", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0423" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0423", "url": "https://www.suse.com/security/cve/CVE-2014-0423" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0423", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0423", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0423" }, { "cve": "CVE-2014-0424", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0424" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0424", "url": "https://www.suse.com/security/cve/CVE-2014-0424" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0424", "url": "https://bugzilla.suse.com/862064" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2014-0424" }, { "cve": "CVE-2014-0428", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0428" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to \"insufficient security checks in IIOP streams,\" which allows attackers to escape the sandbox.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0428", "url": "https://www.suse.com/security/cve/CVE-2014-0428" }, { "category": "external", "summary": "SUSE Bug 858818 for CVE-2014-0428", "url": "https://bugzilla.suse.com/858818" }, { "category": "external", "summary": "SUSE Bug 862064 for CVE-2014-0428", "url": "https://bugzilla.suse.com/862064" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0428", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0428", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0428" }, { "cve": "CVE-2014-0429", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0429" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0429", "url": "https://www.suse.com/security/cve/CVE-2014-0429" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0429", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0429", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0429", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0429", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0429" }, { "cve": "CVE-2014-0446", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0446" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0446", "url": "https://www.suse.com/security/cve/CVE-2014-0446" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0446", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0446", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0446", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0446", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0446" }, { "cve": "CVE-2014-0448", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0448" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0448", "url": "https://www.suse.com/security/cve/CVE-2014-0448" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0448", "url": "https://bugzilla.suse.com/877429" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2014-0448" }, { "cve": "CVE-2014-0449", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0449" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0449", "url": "https://www.suse.com/security/cve/CVE-2014-0449" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0449", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0449", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-0449" }, { "cve": "CVE-2014-0451", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0451" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0451", "url": "https://www.suse.com/security/cve/CVE-2014-0451" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0451", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0451", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0451", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0451", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0451" }, { "cve": "CVE-2014-0452", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0452" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0452", "url": "https://www.suse.com/security/cve/CVE-2014-0452" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0452", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0452", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0452", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0452", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0452" }, { "cve": "CVE-2014-0453", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0453" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0453", "url": "https://www.suse.com/security/cve/CVE-2014-0453" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0453", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0453", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0453", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0453", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0453" }, { "cve": "CVE-2014-0454", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0454" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0454", "url": "https://www.suse.com/security/cve/CVE-2014-0454" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0454", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0454", "url": "https://bugzilla.suse.com/877429" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0454" }, { "cve": "CVE-2014-0455", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0455" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0455", "url": "https://www.suse.com/security/cve/CVE-2014-0455" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0455", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0455", "url": "https://bugzilla.suse.com/877429" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0455" }, { "cve": "CVE-2014-0457", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0457" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0457", "url": "https://www.suse.com/security/cve/CVE-2014-0457" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0457", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0457", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0457", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0457", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0457" }, { "cve": "CVE-2014-0458", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0458" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0458", "url": "https://www.suse.com/security/cve/CVE-2014-0458" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0458", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0458", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0458", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0458", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0458" }, { "cve": "CVE-2014-0459", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0459" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0459", "url": "https://www.suse.com/security/cve/CVE-2014-0459" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0459", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0459", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0459", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0459", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0459" }, { "cve": "CVE-2014-0460", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0460" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0460", "url": "https://www.suse.com/security/cve/CVE-2014-0460" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0460", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0460", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0460", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0460", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0460" }, { "cve": "CVE-2014-0461", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0461" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0461", "url": "https://www.suse.com/security/cve/CVE-2014-0461" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-0461", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-0461", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0461", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0461", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-0461" }, { "cve": "CVE-2014-0878", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0878" } ], "notes": [ { "category": "general", "text": "The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator\u0027s output.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0878", "url": "https://www.suse.com/security/cve/CVE-2014-0878" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-0878", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-0878", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2014-0878" }, { "cve": "CVE-2014-1876", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-1876" } ], "notes": [ { "category": "general", "text": "The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-1876", "url": "https://www.suse.com/security/cve/CVE-2014-1876" }, { "category": "external", "summary": "SUSE Bug 863305 for CVE-2014-1876", "url": "https://bugzilla.suse.com/863305" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-1876", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-1876", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-1876", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-1876", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-1876" }, { "cve": "CVE-2014-2398", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2398" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2398", "url": "https://www.suse.com/security/cve/CVE-2014-2398" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-2398", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2398", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2398", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2398", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2014-2398" }, { "cve": "CVE-2014-2401", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2401" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2401", "url": "https://www.suse.com/security/cve/CVE-2014-2401" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2401", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2401", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-2401" }, { "cve": "CVE-2014-2402", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2402" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2402", "url": "https://www.suse.com/security/cve/CVE-2014-2402" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2402", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2402", "url": "https://bugzilla.suse.com/877429" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-2402" }, { "cve": "CVE-2014-2409", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2409" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2409", "url": "https://www.suse.com/security/cve/CVE-2014-2409" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2409", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2409", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "moderate" } ], "title": "CVE-2014-2409" }, { "cve": "CVE-2014-2412", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2412" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2412", "url": "https://www.suse.com/security/cve/CVE-2014-2412" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-2412", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2412", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2412", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2412", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-2412" }, { "cve": "CVE-2014-2414", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2414" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2414", "url": "https://www.suse.com/security/cve/CVE-2014-2414" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-2414", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2414", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2414", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2414", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-2414" }, { "cve": "CVE-2014-2420", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2420" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2420", "url": "https://www.suse.com/security/cve/CVE-2014-2420" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2420", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2420", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "low" } ], "title": "CVE-2014-2420" }, { "cve": "CVE-2014-2421", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2421" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2421", "url": "https://www.suse.com/security/cve/CVE-2014-2421" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-2421", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2421", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2421", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2421", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-2421" }, { "cve": "CVE-2014-2423", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2423" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2423", "url": "https://www.suse.com/security/cve/CVE-2014-2423" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-2423", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2423", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2423", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2423", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-2423" }, { "cve": "CVE-2014-2427", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2427" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2427", "url": "https://www.suse.com/security/cve/CVE-2014-2427" }, { "category": "external", "summary": "SUSE Bug 873872 for CVE-2014-2427", "url": "https://bugzilla.suse.com/873872" }, { "category": "external", "summary": "SUSE Bug 873873 for CVE-2014-2427", "url": "https://bugzilla.suse.com/873873" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2427", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2427", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "critical" } ], "title": "CVE-2014-2427" }, { "cve": "CVE-2014-2428", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-2428" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-2428", "url": "https://www.suse.com/security/cve/CVE-2014-2428" }, { "category": "external", "summary": "SUSE Bug 877429 for CVE-2014-2428", "url": "https://bugzilla.suse.com/877429" }, { "category": "external", "summary": "SUSE Bug 877430 for CVE-2014-2428", "url": "https://bugzilla.suse.com/877430" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2-LTSS:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-alsa-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-devel-1.7.0_sr7.0-0.5.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-jdbc-1.7.0_sr6.0-0.7.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP2:java-1_7_0-ibm-plugin-1.7.0_sr6.0-0.7.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2013-11-19T10:42:44Z", "details": "important" } ], "title": "CVE-2014-2428" }, { "cve": "CVE-2014-8891", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8891" } ], "notes": [ { "category": "general", "text": "Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unsp