RHSA-2014:0685
Vulnerability from csaf_opensuse - Published: 2014-06-10 00:00 - Updated: 2026-09-20 10:52Summary
security update for java-1.6.0-openjdk
Severity
Important
Notes
Title of the patch: security update for java-1.6.0-openjdk
Description of the patch: This security update provides a functional equivalent of RHSA-2014:0685.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2014:0685.
Patchnames: RHSA-2014:0685
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
low
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
Affected products
Recommended
5 products, the same list as for
CVE-2014-0429
Threats
Impact
moderate
References
129 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for java-1.6.0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2014:0685.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2014:0685.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2014:0685",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2014_0685.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0429 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0446 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0451 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0451/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0452 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0452/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0453 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0456 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0457 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0458 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0458/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0460 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0461 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0461/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-1876 page",
"url": "https://www.suse.com/security/cve/CVE-2014-1876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2397 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2398 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2403 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2412 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2414 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2421 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2423 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2423/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-2427 page",
"url": "https://www.suse.com/security/cve/CVE-2014-2427/"
}
],
"title": "security update for java-1.6.0-openjdk",
"tracking": {
"current_release_date": "2026-09-20T10:52:43Z",
"generator": {
"date": "2014-06-10T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2014:0685",
"initial_release_date": "2014-06-10T00:00:00Z",
"revision_history": [
{
"date": "2014-06-10T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T10:52:43Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_id": "java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-1.6.0-openjdk@1.6.0.0-6.1.13.3.el7_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-1.6.0-openjdk-demo@1.6.0.0-6.1.13.3.el7_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-1.6.0-openjdk-devel@1.6.0.0-6.1.13.3.el7_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-1.6.0-openjdk-javadoc@1.6.0.0-6.1.13.3.el7_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/java-1.6.0-openjdk-src@1.6.0.0-6.1.13.3.el7_0?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
},
"product_reference": "java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
},
"product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
},
"product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
},
"product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
},
"product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0429"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0429",
"url": "https://www.suse.com/security/cve/CVE-2014-0429"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0429",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0429",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0429",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0429",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0429",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0429"
},
{
"cve": "CVE-2014-0446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0446"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0446",
"url": "https://www.suse.com/security/cve/CVE-2014-0446"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0446",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0446",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0446",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0446",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0446",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0446"
},
{
"cve": "CVE-2014-0451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0451"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0451",
"url": "https://www.suse.com/security/cve/CVE-2014-0451"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0451",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0451",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0451",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0451",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0451",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0451"
},
{
"cve": "CVE-2014-0452",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0452"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0452",
"url": "https://www.suse.com/security/cve/CVE-2014-0452"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0452",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0452",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0452",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0452",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0452",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0452"
},
{
"cve": "CVE-2014-0453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0453"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0453",
"url": "https://www.suse.com/security/cve/CVE-2014-0453"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0453",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0453",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0453",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0453",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0453",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0453"
},
{
"cve": "CVE-2014-0456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0456"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0456",
"url": "https://www.suse.com/security/cve/CVE-2014-0456"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0456",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0456",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0456",
"url": "https://bugzilla.suse.com/873896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0456"
},
{
"cve": "CVE-2014-0457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0457"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0457",
"url": "https://www.suse.com/security/cve/CVE-2014-0457"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0457",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0457",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0457",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0457",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0457",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0457"
},
{
"cve": "CVE-2014-0458",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0458"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0458",
"url": "https://www.suse.com/security/cve/CVE-2014-0458"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0458",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0458",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0458",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0458",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0458",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0458"
},
{
"cve": "CVE-2014-0460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0460"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0460",
"url": "https://www.suse.com/security/cve/CVE-2014-0460"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0460",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0460",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0460",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0460",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0460",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0460"
},
{
"cve": "CVE-2014-0461",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0461"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0461",
"url": "https://www.suse.com/security/cve/CVE-2014-0461"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-0461",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-0461",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-0461",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-0461",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-0461",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0461"
},
{
"cve": "CVE-2014-1876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-1876"
}
],
"notes": [
{
"category": "general",
"text": "The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-1876",
"url": "https://www.suse.com/security/cve/CVE-2014-1876"
},
{
"category": "external",
"summary": "SUSE Bug 863305 for CVE-2014-1876",
"url": "https://bugzilla.suse.com/863305"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-1876",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-1876",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-1876",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-1876",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-1876"
},
{
"cve": "CVE-2014-2397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2397"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2397",
"url": "https://www.suse.com/security/cve/CVE-2014-2397"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2397",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2397",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2397",
"url": "https://bugzilla.suse.com/873896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2397"
},
{
"cve": "CVE-2014-2398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2398"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2398",
"url": "https://www.suse.com/security/cve/CVE-2014-2398"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2398",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2398",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2398",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-2398",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-2398",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2014-2398"
},
{
"cve": "CVE-2014-2403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2403"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2403",
"url": "https://www.suse.com/security/cve/CVE-2014-2403"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2403",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2403",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2403",
"url": "https://bugzilla.suse.com/873896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2403"
},
{
"cve": "CVE-2014-2412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2412"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2412",
"url": "https://www.suse.com/security/cve/CVE-2014-2412"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2412",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2412",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2412",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-2412",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-2412",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2412"
},
{
"cve": "CVE-2014-2414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2414"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2414",
"url": "https://www.suse.com/security/cve/CVE-2014-2414"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2414",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2414",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2414",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-2414",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-2414",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2414"
},
{
"cve": "CVE-2014-2421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2421"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2421",
"url": "https://www.suse.com/security/cve/CVE-2014-2421"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2421",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2421",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2421",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-2421",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-2421",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2421"
},
{
"cve": "CVE-2014-2423",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2423"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2423",
"url": "https://www.suse.com/security/cve/CVE-2014-2423"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2423",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2423",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2423",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-2423",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-2423",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2423"
},
{
"cve": "CVE-2014-2427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-2427"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-2427",
"url": "https://www.suse.com/security/cve/CVE-2014-2427"
},
{
"category": "external",
"summary": "SUSE Bug 873872 for CVE-2014-2427",
"url": "https://bugzilla.suse.com/873872"
},
{
"category": "external",
"summary": "SUSE Bug 873873 for CVE-2014-2427",
"url": "https://bugzilla.suse.com/873873"
},
{
"category": "external",
"summary": "SUSE Bug 873896 for CVE-2014-2427",
"url": "https://bugzilla.suse.com/873896"
},
{
"category": "external",
"summary": "SUSE Bug 877429 for CVE-2014-2427",
"url": "https://bugzilla.suse.com/877429"
},
{
"category": "external",
"summary": "SUSE Bug 877430 for CVE-2014-2427",
"url": "https://bugzilla.suse.com/877430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-demo-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-devel-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-javadoc-1:1.6.0.0-6.1.13.3.el7_0.x86_64",
"SUSE Liberty Linux 7:java-1.6.0-openjdk-src-1:1.6.0.0-6.1.13.3.el7_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-06-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-2427"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…