Lucene search

K
suseSuseSUSE-SU-2016:1388-1
HistoryMay 24, 2016 - 2:08 p.m.

Security update for IBM Java 1.6.0 (important)

2016-05-2414:08:01
lists.opensuse.org
21

0.49 Medium

EPSS

Percentile

97.5%

This IBM Java 1.6.0 SR16 FP25 release fixes the following issues:

Security issues fixed:

   * CVE-2016-0264: buffer overflow vulnerability in the IBM JVM
     (bsc#977648)
   * CVE-2016-0363: insecure use of invoke method in CORBA component,
     incorrect CVE-2013-3009 fix (bsc#977650)
   * CVE-2016-0376: insecure deserialization in CORBA, incorrect
     CVE-2013-5456 fix (bsc#977646)
   * The following CVEs got also fixed during this update. (bsc#979252)
     CVE-2016-3443, CVE-2016-0687, CVE-2016-0686, CVE-2016-3427,
     CVE-2016-3449, CVE-2016-3422, CVE-2016-3426

Security Issues:

   * CVE-2016-0376
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0376">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0376</a>&gt;
   * CVE-2016-0363
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0363">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0363</a>&gt;
   * CVE-2016-0264
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0264">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0264</a>&gt;
   * CVE-2016-3443
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3443">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3443</a>&gt;
   * CVE-2016-0687
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0687">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0687</a>&gt;
   * CVE-2016-0686
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0686">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0686</a>&gt;
   * CVE-2016-3427
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3427">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3427</a>&gt;
   * CVE-2016-3449
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3449">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3449</a>&gt;
   * CVE-2016-3422
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3422">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3422</a>&gt;
   * CVE-2016-3426
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3426">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3426</a>&gt;