1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2015:1375-1

[SUSE-SU-2015:1375-1] Security update for java-1_7_0-ibm

Severity Important
Affected Packages 25
CVEs 21
Info Packages References Vulnerabilities

Security update for java-1_7_0-ibm

java-1_7_0-ibm was updated to fix 21 security issues.

These security issues were fixed:
- CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment (bsc#938895).
- CVE-2015-4748: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security (bsc#938895).
- CVE-2015-2664: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment (bsc#938895).
- CVE-2015-0192: Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allowed remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine (bsc#938895).
- CVE-2015-2613: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JCE (bsc#938895).
- CVE-2015-4731: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX (bsc#938895).
- CVE-2015-2637: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
- CVE-2015-4733: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI (bsc#938895).
- CVE-2015-4732: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590 (bsc#938895).
- CVE-2015-2621: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allowed remote attackers to affect confidentiality via vectors related to JMX (bsc#938895).
- CVE-2015-2619: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
- CVE-2015-2590: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732 (bsc#938895).
- CVE-2015-2638: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).
- CVE-2015-2625: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JSSE (bsc#938895).
- CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
- CVE-2015-1931: Unspecified vulnerability (bsc#938895).
- CVE-2015-4760: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).
- CVE-2015-4000: The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, did not properly convey a DHE_EXPORT choice, which allowed man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the 'Logjam' issue (bsc#935540).
- CVE-2015-2601: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JCE (bsc#938895).
- CVE-2015-2808: The RC4 algorithm, as used in the TLS protocol and SSL protocol, did not properly combine state data with key data during the initialization phase, which made it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the 'Bar Mitzvah' issue (bsc#938895).
- CVE-2015-4749: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect availability via vectors related to JNDI (bsc#938895).

Package Affected Version
pkg:rpm/suse/java-1_7_0-ibm?arch=x86_64&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm?arch=x86_64&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm?arch=s390x&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm?arch=s390x&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm?arch=ppc64&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm?arch=i586&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm?arch=i586&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=x86_64&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=x86_64&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=i586&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=i586&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=x86_64&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=x86_64&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=s390x&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=s390x&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=ppc64&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=i586&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=i586&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-devel?arch=x86_64&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-devel?arch=s390x&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-devel?arch=i586&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=x86_64&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=x86_64&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=i586&distro=sles-11&sp=3 < 1.7.0_sr9.10-9.1
pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=i586&distro=sles-11&sp=2 < 1.7.0_sr9.10-9.1
ID
SUSE-SU-2015:1375-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2015/suse-su-20151375-1/
Published
2015-07-31T13:14:30
(9 years ago)
Modified
2015-07-31T13:14:30
(9 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1375-1.json
Suse URL for SUSE-SU-2015:1375-1 https://www.suse.com/support/update/announcement/2015/suse-su-20151375-1/
Suse E-Mail link for SUSE-SU-2015:1375-1 https://lists.suse.com/pipermail/sle-security-updates/2015-August/001534.html
Bugzilla SUSE Bug 935540 https://bugzilla.suse.com/935540
Bugzilla SUSE Bug 938895 https://bugzilla.suse.com/938895
CVE SUSE CVE CVE-2015-0192 page https://www.suse.com/security/cve/CVE-2015-0192/
CVE SUSE CVE CVE-2015-1931 page https://www.suse.com/security/cve/CVE-2015-1931/
CVE SUSE CVE CVE-2015-2590 page https://www.suse.com/security/cve/CVE-2015-2590/
CVE SUSE CVE CVE-2015-2601 page https://www.suse.com/security/cve/CVE-2015-2601/
CVE SUSE CVE CVE-2015-2613 page https://www.suse.com/security/cve/CVE-2015-2613/
CVE SUSE CVE CVE-2015-2619 page https://www.suse.com/security/cve/CVE-2015-2619/
CVE SUSE CVE CVE-2015-2621 page https://www.suse.com/security/cve/CVE-2015-2621/
CVE SUSE CVE CVE-2015-2625 page https://www.suse.com/security/cve/CVE-2015-2625/
CVE SUSE CVE CVE-2015-2632 page https://www.suse.com/security/cve/CVE-2015-2632/
CVE SUSE CVE CVE-2015-2637 page https://www.suse.com/security/cve/CVE-2015-2637/
CVE SUSE CVE CVE-2015-2638 page https://www.suse.com/security/cve/CVE-2015-2638/
CVE SUSE CVE CVE-2015-2664 page https://www.suse.com/security/cve/CVE-2015-2664/
CVE SUSE CVE CVE-2015-2808 page https://www.suse.com/security/cve/CVE-2015-2808/
CVE SUSE CVE CVE-2015-4000 page https://www.suse.com/security/cve/CVE-2015-4000/
CVE SUSE CVE CVE-2015-4729 page https://www.suse.com/security/cve/CVE-2015-4729/
CVE SUSE CVE CVE-2015-4731 page https://www.suse.com/security/cve/CVE-2015-4731/
CVE SUSE CVE CVE-2015-4732 page https://www.suse.com/security/cve/CVE-2015-4732/
CVE SUSE CVE CVE-2015-4733 page https://www.suse.com/security/cve/CVE-2015-4733/
CVE SUSE CVE CVE-2015-4748 page https://www.suse.com/security/cve/CVE-2015-4748/
CVE SUSE CVE CVE-2015-4749 page https://www.suse.com/security/cve/CVE-2015-4749/
CVE SUSE CVE CVE-2015-4760 page https://www.suse.com/security/cve/CVE-2015-4760/
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=x86_64&distro=sles-11&sp=3 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=x86_64&distro=sles-11&sp=2 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=s390x&distro=sles-11&sp=3 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 s390x
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=s390x&distro=sles-11&sp=2 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 s390x
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=ppc64&distro=sles-11&sp=3 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 ppc64
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=i586&distro=sles-11&sp=3 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm?arch=i586&distro=sles-11&sp=2 suse java-1_7_0-ibm < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=x86_64&distro=sles-11&sp=3 suse java-1_7_0-ibm-plugin < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=x86_64&distro=sles-11&sp=2 suse java-1_7_0-ibm-plugin < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=i586&distro=sles-11&sp=3 suse java-1_7_0-ibm-plugin < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-plugin?arch=i586&distro=sles-11&sp=2 suse java-1_7_0-ibm-plugin < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=x86_64&distro=sles-11&sp=3 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=x86_64&distro=sles-11&sp=2 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=s390x&distro=sles-11&sp=3 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 s390x
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=s390x&distro=sles-11&sp=2 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 s390x
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=ppc64&distro=sles-11&sp=3 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 ppc64
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=i586&distro=sles-11&sp=3 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-jdbc?arch=i586&distro=sles-11&sp=2 suse java-1_7_0-ibm-jdbc < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-devel?arch=x86_64&distro=sles-11&sp=2 suse java-1_7_0-ibm-devel < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-devel?arch=s390x&distro=sles-11&sp=2 suse java-1_7_0-ibm-devel < 1.7.0_sr9.10-9.1 sles-11 s390x
Affected pkg:rpm/suse/java-1_7_0-ibm-devel?arch=i586&distro=sles-11&sp=2 suse java-1_7_0-ibm-devel < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=x86_64&distro=sles-11&sp=3 suse java-1_7_0-ibm-alsa < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=x86_64&distro=sles-11&sp=2 suse java-1_7_0-ibm-alsa < 1.7.0_sr9.10-9.1 sles-11 x86_64
Affected pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=i586&distro=sles-11&sp=3 suse java-1_7_0-ibm-alsa < 1.7.0_sr9.10-9.1 sles-11 i586
Affected pkg:rpm/suse/java-1_7_0-ibm-alsa?arch=i586&distro=sles-11&sp=2 suse java-1_7_0-ibm-alsa < 1.7.0_sr9.10-9.1 sles-11 i586
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date