OpenJDK was updated to 2.5.5 - OpenJdk 7u79 to fix security issues and bugs :

The following vulnerabilities were fixed :

  - CVE-2015-0458: Deployment: unauthenticated remote     attackers could execute arbitrary code via multiple     protocols.

  - CVE-2015-0459: 2D: unauthenticated remote attackers     could execute arbitrary code via multiple protocols.

  - CVE-2015-0460: Hotspot: unauthenticated remote attackers     could execute arbitrary code via multiple protocols.

  - CVE-2015-0469: 2D: unauthenticated remote attackers     could execute arbitrary code via multiple protocols.

  - CVE-2015-0477: Beans: unauthenticated remote attackers     could update, insert or delete some JAVA accessible data     via multiple protocols

  - CVE-2015-0478: JCE: unauthenticated remote attackers     could read some JAVA accessible data via multiple     protocols

  - CVE-2015-0480: Tools: unauthenticated remote attackers     could update, insert or delete some JAVA accessible data     via multiple protocols and cause a partial denial of     service (partial DOS)

  - CVE-2015-0484: JavaFX: unauthenticated remote attackers     could read, update, insert or delete access some Java     accessible data via multiple protocols and cause a     partial denial of service (partial DOS).

  - CVE-2015-0488: JSSE: unauthenticated remote attackers     could cause a partial denial of service (partial DOS).

  - CVE-2015-0491: 2D: unauthenticated remote attackers     could execute arbitrary code via multiple protocols.

  - CVE-2015-0492: JavaFX: unauthenticated remote attackers     could execute arbitrary code via multiple protocols.

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security alerts page, listed in the References section. (CVE-2005-1080, CVE-2015-0138, CVE-2015-0192, CVE-2015-0458, CVE-2015-0459, CVE-2015-0469, CVE-2015-0477, CVE-2015-0478, CVE-2015-0480, CVE-2015-0488, CVE-2015-0491, CVE-2015-1914, CVE-2015-2808)

The CVE-2015-0478 issue was discovered by Florian Weimer of Red Hat Product Security.

Note: With this update, the IBM JDK now disables RC4 SSL/TLS cipher suites by default to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla bug 1207101, linked to from the References section, for additional details about this change.

All users of java-1.7.0-ibm are advised to upgrade to these updated packages, containing the IBM Java SE 7 SR9 release. All running instances of IBM Java must be restarted for the update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1091 advisory.

    IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM     Java Software Development Kit.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Satellite 5. In a typical     operating environment, these are of low security risk as the runtime is not     used on untrusted applets. Further information about these flaws can be     found on the IBM Java Security alerts page, listed in the References     section. (CVE-2005-1080, CVE-2015-0138, CVE-2015-0192, CVE-2015-0458,     CVE-2015-0459, CVE-2015-0469, CVE-2015-0477, CVE-2015-0478, CVE-2015-0480,     CVE-2015-0488, CVE-2015-0491, CVE-2015-1914, CVE-2015-2808)

    The CVE-2015-0478 issue was discovered by Florian Weimer of Red Hat     Product Security.

    Note: With this update, the IBM JDK now disables RC4 SSL/TLS cipher suites     by default to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla     bug 1207101, linked to from the References section, for additional details     about this change.

    Users of Red Hat Satellite 5.6 and 5.7 are advised to upgrade to these     updated packages, which contain the IBM Java SE 6 SR16-FP4 release. For     this update to take effect, Red Hat Satellite must be restarted     (/usr/sbin/rhn-satellite restart), as well as all running instances of     IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

IBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.

Tabulated information can be found on: <a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_May_2015'>http://www.ibm.com/developerworks/java/jdk/alerts/#IB M_Security_Update_May_2015</a>

CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IBM Java 1.7.0 was updated to SR9 fixing security issues and bugs.

Tabulated information can be found on: <a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_May_2015'>http://www.ibm.com/developerworks/java/jdk/alerts/#IB M_Security_Update_May_2015</a>.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues :

  - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734     CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810     CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843     CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872     CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902     CVE-2015-4903 CVE-2015-4911 CVE-2015-5006

  - Add backcompat symlinks for sdkdir

  - bnc#941939: Fix to provide %{name} instead of %{sdklnk}     only in _jvmprivdir

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.

Tabulated information can be found on:
[http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Updat e_May
_2015](http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security
_Upda te_May_2015)

CVEs addressed: CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

Additional bugs fixed :

  - Fix javaws/plugin stuff should slave plugin     update-alternatives (bnc#912434)

  - Changed Java to use the system root CA certificates     (bnc#912447)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This version update for java-1_6_0-ibm to version 6.0.16.15 fixes the following issues :

CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

For more information please visit: <a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_November_2015'>http://www.ibm.com/developerworks/java/jdk/alert s/#IBM_Security_Update_November_2015</a>

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
83106	openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2015-331)	Nessus	SuSE Local Security Checks	2015/4/28	2021/1/19	critical
83433	RHEL 5 : java-1.7.0-ibm (RHSA-2015:1007) (Bar Mitzvah)	Nessus	Red Hat Local Security Checks	2015/5/13	2019/10/24	critical
84143	RHEL 6 : Red Hat Satellite IBM Java Runtime (RHSA-2015:1091)	Nessus	Red Hat Local Security Checks	2015/6/12	2025/4/15	critical
84425	SUSE SLES10 Security Update : IBM Java (SUSE-SU-2015:1138-1) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2015/6/26	2021/1/6	critical
84441	SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2015:1086-4) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2015/6/29	2021/1/19	critical
87181	SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2015:2168-1) (FREAK)	Nessus	SuSE Local Security Checks	2015/12/3	2024/6/18	critical
119967	SUSE SLES12 Security Update : java-1_6_0-ibm (SUSE-SU-2015:1161-1) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/11	critical
87914	SUSE SLES10 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0113-1) (Bar Mitzvah) (FREAK)	Nessus	SuSE Local Security Checks	2016/1/14	2024/6/18	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical