IBM Java 1.6.0はセキュリティ問題およびバグを修正しているSR16-FP4に更新されています。

表形式の情報については、次を参照してください。
[http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Updat e_May
_2015]（http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security
_Upda te_May_2015）

CVE は以下に対処しました： CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204

追加のバグ修正：

  -  javawsおよびプラグインの要素が、プラグインの更新代替手段をスレーブに設定する必要性を修正します（bnc#912434）

  - システムのroot CA証明書を使用するようにJavaを変更しました（bnc#912447）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

リモートホストにインストールされている Oracle (旧 Sun) Java SE または Java for Business は、8 Update 45、7 Update 79、6 Update 95、または 5 Update 85 より前のバージョンです。したがって、次のコンポーネントでセキュリティの脆弱性による影響を受けます：

  - 2D
  - Beans
  - Deployment
  - Hotspot
  - JavaFX
  - JCE
  - JSSE
  - Tools

IBM Java 1.6.0 はセキュリティ問題およびバグを修正している SR16-FP4 に更新されています。

表形式の情報については、次を参照してください：<a href='http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_ Update_May_2015'>http://www.ibm.com/developerworks/java/jdk/alerts/#IB M_Security_Update_May_2015</a>

CVE-2015-0192、CVE-2015-2808、CVE-2015-1914、CVE-2015-0138、CVE-2015-0491、CVE-2015-0458、CVE-2015-0459、CVE-2015-0469、CVE-2015-0480、CVE-2015-0488、CVE-2015-0478、CVE-2015-0477、CVE-2015-0204

注意：Tenable Network Security は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

The Oracle Java SE installed on the remote host is version 7 prior to Update 77; therefore, it is affected by multiple vulnerabilities.  While the details of these vulnerabilities are not currently known, the vendor has acknowledged that confidentiality, integrity, and availability can be impacted remotely.  The components affected by these vulnerabilities are:

 - 2D running on client deployments of Oracle Java (CVE-2015-0491, CVE-2015-0459, CVE-2015-0469)
 - Beans running on both client and server deployments of Java Secure Socket Extension (CVE-2015-0477)
 - Deployment running on client deployments of Oracle Java (CVE-2015-0458)
 - Hotspot running on client deployments of Oracle Java (CVE-2015-0460)
 - JSSE running on client or server deployments of Oracle Java (CVE-2015-0488)
 - Tools running on client deployments of Oracle Java (CVE-2015-0480)
 - JCE running on client or server deployments of Oracle Java (CVE-2015-0478)
 - Several undisclosed attack vectors which affect client and server deployments of Oracle Java (CVE-2015-0492, CVE-2015-0484)

The Oracle Java SE installed on the remote host is version 8 prior to Update 41; therefore, it is affected by multiple vulnerabilities.  While the details of these vulnerabilities are not currently known, the vendor has acknowledged that confidentiality, integrity, and availability can be impacted remotely.  The components affected by these vulnerabilities are:

 - 2D running on client deployments of Oracle Java (CVE-2015-0491, CVE-2015-0459, CVE-2015-0469)
 - Beans running on both client and server deployments of Java Secure Socket Extension (CVE-2015-0477)
 - Deployment running on client deployments of Oracle Java (CVE-2015-0458, CVE-2015-0486)
 - Hotspot running on client deployments of Oracle Java (CVE-2015-0460, CVE-2015-0470)
 - JSSE running on client or server deployments of Oracle Java (CVE-2015-0488)
 - Tools running on client deployments of Oracle Java (CVE-2015-0480)
 - JCE running on client or server deployments of Oracle Java (CVE-2015-0478)
 - Several undisclosed attack vectors which affect client and server deployments of Oracle Java (CVE-2015-0492, CVE-2015-0484)

The Oracle Java SE installed on the remote host is version 6 prior to Update 92; therefore, it is affected by multiple vulnerabilities.  While the details of these vulnerabilities are not currently known, the vendor has acknowledged that confidentiality, integrity, and availability can be impacted remotely.  The components affected by these vulnerabilities are:

 - 2D running on client deployments of Oracle Java (CVE-2015-0491, CVE-2015-0459, CVE-2015-0469)
 - Beans running on both client and server deployments of Java Secure Socket Extension (CVE-2015-0477)
 - Deployment running on client deployments of Oracle Java (CVE-2015-0458)
 - Hotspot running on client deployments of Oracle Java (CVE-2015-0460)
 - JSSE running on client or server deployments of Oracle Java (CVE-2015-0488)
 - Tools running on client deployments of Oracle Java (CVE-2015-0480)
 - JCE running on client or server deployments of Oracle Java (CVE-2015-0478)

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 45, 7 Update 79, 6 Update 95, or 5 Update 85. It is, therefore, affected by security vulnerabilities in the following components :

 - 2D
 - Beans
 - Deployment
 - Hotspot
 - JavaFX
 - JCE
 - JSSE
 - Tools

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
119967	SUSE SLES12セキュリティ更新プログラム：java-1_6_0-ibm （SUSE-SU-2015:1161-1）（Bar Mitzvah）（FREAK）	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/11	critical
82821	Oracle Java SE の複数の脆弱性（2015 年 4 月 CPU）（UNIX）（FREAK）	Nessus	Misc.	2015/4/16	2024/4/19	high
84286	SUSE SLES11 セキュリティ更新：IBM Java（SUSE-SU-2015:1086-1）（Bar Mitzvah）（FREAK）	Nessus	SuSE Local Security Checks	2015/6/19	2021/1/19	critical
84337	SUSE SLES11 セキュリティ更新：IBM Java（SUSE-SU-2015:1086-2）（Bar Mitzvah）（FREAK）	Nessus	SuSE Local Security Checks	2015/6/23	2021/1/19	critical
8749	Oracle Java SE 7 < Update 77 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2015/1/22	2019/3/6	critical
8748	Oracle Java SE 8 < Update 41 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2015/1/22	2019/3/6	critical
8750	Oracle Java SE 6 < Update 92 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2015/1/22	2019/3/6	critical
700650	Oracle Java SE 5 < Update 85 / 6 < Update 95 / 7 < Update 79 / 8 < Update 45 Multiple Vulnerabilities (April 2015 CPU) (FREAK)	Nessus Network Monitor	Web Clients	2019/5/2	2019/5/2	critical

检测

插件搜索

critical

high

critical

critical

critical

critical

critical

critical