SUSE-SU-2016:1475-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - IBM Java 80-3.0 released: bsc977646 bsc977648 bsc977650 bsc979252 CVE-2016-0376 CVE-2016-0264 CVE-2016-0363 CVE-2016-3443 CVE-2016-0687 CVE-2016-0686 CVE-2016-3427 CVE-2016-3449 CVE-2016-3422 CVE-2016-3426 - There is no HtmlConverter and...

[SECURITY] default-java switch to OpenJDK 7 and java-common update

Package : java-common Version : 0.47+deb7u1 In preparation for the upcoming default-java switch to OpenJDK 7 on 26 June 2016, the java-common package was updated to inform users about the intended change. The news will be automatically shown, if apt-listchanges has been installed on the system...

RHEL 7 : java-1.8.0-ibm (RHSA-2016:0716)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0716 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

JDK: buffer overflow vulnerability in the IBM JVM

Buffer overflow in the Java Virtual Machine JVM in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 allows remote attackers to execute arbitrary code via unspecified...

CentOS 6 : java-1.8.0-openjdk (CESA-2016:0651)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Solaris 8 (sparc) : 152097-53

JavaSE 7: update 151 patch equivalent to JDK 7u151, 64bit. Date this patch was last updated by Sun : Jul/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (x86) : 152098-53

JavaSE 7x86: update 151 patch equivalent to JDK 7u151. Date this patch was last updated by Sun : Jul/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (x86) : 152099-53

JavaSE 7x86: update 151 patch equivalent to JDK 7u151, 64bit. Date this patch was last updated by Sun : Jul/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 152096-53

JavaSE 7: update 151 patch equivalent to JDK 7u151. Date this patch was last updated by Sun : Jul/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

GLSA-201603-11 : Oracle JRE/JDK: Multiple vulnerabilities (Logjam)

The remote host is affected by the vulnerability described in GLSA-201603-11 Oracle JRE/JDK: Multiple vulnerabilities Multiple vulnerabilities exist in both Oracles JRE and JDK. Please review the referenced CVEs for additional information. Impact : Remote attackers could gain access to informatio...

Gentoo Security Advisory GLSA 201603-11

Gentoo Linux Local Security Checks GLSA 201603-11 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Oracle JRE/JDK: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

Updated java-1.8.0-openjdk/copy-jdk-configs/lua-lunit/lua-posix packages fix security vulnerability

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...

RHEL 7 : java-1.8.0-ibm (RHSA-2016:0098)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0098 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several...

Oracle to Kill Java Plugin

It’s the end of an era. Oracle has announced its intent to nail the coffin shut on the Java browser plugin. The company confirmed Wednesday that it expects to deprecate the plugin in JDK 9, slated for release in September, and JRE, in a future Java SE release. Dalibor Topic, a member of Oracle’s...

CentOS 5 / 6 / 7 : java-1.6.0-openjdk (CESA-2016:0067)

Updated java-1.6.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle - HtmlConverter.exe Buffer Overflow

Exploit for windows platform in category local exploits + Credits: hyp3rlinx Vendor: =============== www.oracle.com Product: ======================================== Java Platform SE 6 U24 HtmlConverter.exe Product Version: 6.0.240.50 The HTML Converter is part of Java SE binary part of the JDK a...

SOL91245485 - RSA-CRT key leak vulnerability CVE-2015-5738

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Burpkit - Next-Gen Burpsuite Penetration Testing Tool

Welcome to the next generation of web application penetration testing - using WebKit to own the web. BurpKit is a BurpSuite plugin which helps in assessing complex web apps that render the contents of their pages dynamically. It also provides a bi-directional JavaScript bridge API which allows...

TRSWCM 文件读取漏洞通杀较新版本（二）

简要描述： 貌似是后续更新的时候添加的一个功能，通杀较新版本。 详细说明： 其实还是XML实体注入，不过这次是用的DOM解析XML。 web.xml中配置的Servlet ReceiveMASServlet： ReceiveMASServlet com.trs.components.video.ReceiveMASServlet ReceiveMASServlet /app/video/ReceiveMASServlet 对应的com/trscomponents/video/ReceiveMASServlet.java代码如下： protected void...