RHSA-2015:0067

Vulnerability from csaf_opensuse - Published: 2015-01-21 00:00 - Updated: 2026-09-20 10:53
Summary
security update for java-1.7.0-openjdk
Severity
Critical
Notes
Title of the patch: security update for java-1.7.0-openjdk
Description of the patch: This security update provides a functional equivalent of RHSA-2015:0067. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:0067.
Patchnames: RHSA-2015:0067
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2014-3566
3.4 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2014-6585
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2014-6587
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2014-6591
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2014-6593
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2014-6601
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2015-0383
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2015-0395
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2015-0407
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2015-0408
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2015-0410
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
CVE-2015-0412
Affected products
Recommended 7 products, the same list as for CVE-2014-3566
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2014-3566/ self
https://www.suse.com/security/cve/CVE-2014-6585/ self
https://www.suse.com/security/cve/CVE-2014-6587/ self
https://www.suse.com/security/cve/CVE-2014-6591/ self
https://www.suse.com/security/cve/CVE-2014-6593/ self
https://www.suse.com/security/cve/CVE-2014-6601/ self
https://www.suse.com/security/cve/CVE-2015-0383/ self
https://www.suse.com/security/cve/CVE-2015-0395/ self
https://www.suse.com/security/cve/CVE-2015-0407/ self
https://www.suse.com/security/cve/CVE-2015-0408/ self
https://www.suse.com/security/cve/CVE-2015-0410/ self
https://www.suse.com/security/cve/CVE-2015-0412/ self
https://www.suse.com/security/cve/CVE-2014-3566 external
https://bugzilla.suse.com/1011293 external
https://bugzilla.suse.com/1031023 external
https://bugzilla.suse.com/1072727 external
https://bugzilla.suse.com/901223 external
https://bugzilla.suse.com/901254 external
https://bugzilla.suse.com/901277 external
https://bugzilla.suse.com/901748 external
https://bugzilla.suse.com/901757 external
https://bugzilla.suse.com/901759 external
https://bugzilla.suse.com/901889 external
https://bugzilla.suse.com/901968 external
https://bugzilla.suse.com/902229 external
https://bugzilla.suse.com/902233 external
https://bugzilla.suse.com/902476 external
https://bugzilla.suse.com/903405 external
https://bugzilla.suse.com/903684 external
https://bugzilla.suse.com/904889 external
https://bugzilla.suse.com/905106 external
https://bugzilla.suse.com/914041 external
https://bugzilla.suse.com/957084 external
https://bugzilla.suse.com/994144 external
https://www.suse.com/security/cve/CVE-2014-6585 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2014-6587 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2014-6591 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2014-6593 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2014-6601 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2015-0383 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2015-0395 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2015-0407 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2015-0408 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2015-0410 external
https://bugzilla.suse.com/914041 external
https://www.suse.com/security/cve/CVE-2015-0412 external
https://bugzilla.suse.com/914041 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for java-1.7.0-openjdk",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:0067.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:0067.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:0067",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_0067.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3566 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3566/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-6585 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-6585/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-6587 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-6587/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-6591 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-6591/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-6593 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-6593/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-6601 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-6601/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0383 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0383/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0395 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0395/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0407 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0407/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0408 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0410 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0410/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0412 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0412/"
      }
    ],
    "title": "security update for java-1.7.0-openjdk",
    "tracking": {
      "current_release_date": "2026-09-20T10:53:46Z",
      "generator": {
        "date": "2015-01-21T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:0067",
      "initial_release_date": "2015-01-21T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-01-21T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:53:46Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
                "product": {
                  "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
                  "product_id": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk-javadoc@1.7.0.75-2.5.4.2.el7_0?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_id": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk@1.7.0.75-2.5.4.2.el7_0?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_id": "java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk-accessibility@1.7.0.75-2.5.4.2.el7_0?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_id": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk-demo@1.7.0.75-2.5.4.2.el7_0?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_id": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk-devel@1.7.0.75-2.5.4.2.el7_0?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_id": "java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk-headless@1.7.0.75-2.5.4.2.el7_0?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                "product": {
                  "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_id": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/java-1.7.0-openjdk-src@1.7.0.75-2.5.4.2.el7_0?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch"
        },
        "product_reference": "java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        },
        "product_reference": "java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3566",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3566"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3566",
          "url": "https://www.suse.com/security/cve/CVE-2014-3566"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011293 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/1011293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031023 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/1031023"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1072727 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/1072727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901223 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901223"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901254 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901277 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901748 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901757 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901759 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901889 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901889"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901968 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902229 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/902229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902233 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/902233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902476 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/902476"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 903405 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/903405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 903684 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/903684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904889 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/904889"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905106 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/905106"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/914041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957084 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/957084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994144 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/994144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3566"
    },
    {
      "cve": "CVE-2014-6585",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-6585"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-6585",
          "url": "https://www.suse.com/security/cve/CVE-2014-6585"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-6585",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-6585"
    },
    {
      "cve": "CVE-2014-6587",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-6587"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-6587",
          "url": "https://www.suse.com/security/cve/CVE-2014-6587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-6587",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-6587"
    },
    {
      "cve": "CVE-2014-6591",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-6591"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-6591",
          "url": "https://www.suse.com/security/cve/CVE-2014-6591"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-6591",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-6591"
    },
    {
      "cve": "CVE-2014-6593",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-6593"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-6593",
          "url": "https://www.suse.com/security/cve/CVE-2014-6593"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-6593",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-6593"
    },
    {
      "cve": "CVE-2014-6601",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-6601"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-6601",
          "url": "https://www.suse.com/security/cve/CVE-2014-6601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-6601",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-6601"
    },
    {
      "cve": "CVE-2015-0383",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0383"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0383",
          "url": "https://www.suse.com/security/cve/CVE-2015-0383"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2015-0383",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0383"
    },
    {
      "cve": "CVE-2015-0395",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0395"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0395",
          "url": "https://www.suse.com/security/cve/CVE-2015-0395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2015-0395",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0395"
    },
    {
      "cve": "CVE-2015-0407",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0407"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0407",
          "url": "https://www.suse.com/security/cve/CVE-2015-0407"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2015-0407",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0407"
    },
    {
      "cve": "CVE-2015-0408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0408",
          "url": "https://www.suse.com/security/cve/CVE-2015-0408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2015-0408",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0408"
    },
    {
      "cve": "CVE-2015-0410",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0410"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0410",
          "url": "https://www.suse.com/security/cve/CVE-2015-0410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2015-0410",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0410"
    },
    {
      "cve": "CVE-2015-0412",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0412"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
          "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0412",
          "url": "https://www.suse.com/security/cve/CVE-2015-0412"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2015-0412",
          "url": "https://bugzilla.suse.com/914041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-accessibility-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-demo-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-devel-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-headless-1:1.7.0.75-2.5.4.2.el7_0.x86_64",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-javadoc-1:1.7.0.75-2.5.4.2.el7_0.noarch",
            "SUSE Liberty Linux 7:java-1.7.0-openjdk-src-1:1.7.0.75-2.5.4.2.el7_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0412"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.