- apply aarch64 patches on openSUSE 12.3+, EM_AARCH64 is     not defined in earlier releases

  - update to icedtea-2.3.9 (bnc#816720) 

  - Security fixes

  - S6657673, CVE-2013-1518: Issues with JAXP

  - S7200507: Refactor Introspector internals

  - S8000724, CVE-2013-2417: Improve networking     serialization

  - S8001031, CVE-2013-2419: Better font processing

  - S8001040, CVE-2013-1537: Rework RMI model

  - S8001322: Refactor deserialization

  - S8001329, CVE-2013-1557: Augment RMI logging

  - S8003335: Better handling of Finalizer thread

  - S8003445: Adjust JAX-WS to focus on API

  - S8003543, CVE-2013-2415: Improve processing of MTOM     attachments

  - S8004261: Improve input validation

  - S8004336, CVE-2013-2431: Better handling of method     handle intrinsic frames

  - S8004986, CVE-2013-2383: Better handling of glyph table

  - S8004987, CVE-2013-2384: Improve font layout

  - S8004994, CVE-2013-1569: Improve checking of glyph table

  - S8005432: Update access to JAX-WS

  - S8005943: (process) Improved Runtime.exec

  - S8006309: More reliable control panel operation

  - S8006435, CVE-2013-2424: Improvements in JMX

  - S8006790: Improve checking for windows

  - S8006795: Improve font warning messages

  - S8007406: Improve accessibility of AccessBridge

  - S8007617, CVE-2013-2420: Better validation of images

  - S8007667, CVE-2013-2430: Better image reading

  - S8007918, CVE-2013-2429: Better image writing

  - S8008140: Better method handle resolution

  - S8009049, CVE-2013-2436: Better method handle binding

  - S8009063, CVE-2013-2426: Improve reliability of     ConcurrentHashMap

  - S8009305, CVE-2013-0401: Improve AWT data transfer

  - S8009677, CVE-2013-2423: Better setting of setters

  - S8009699, CVE-2013-2421: Methodhandle lookup

  - S8009814, CVE-2013-1488: Better driver management

  - S8009857, CVE-2013-2422: Problem with plugin

  - Backports

  - S7130662, RH928500: GTK file dialog crashes with a NPE

  - Bug fixes

  - PR1363: Fedora 19 / rawhide FTBFS SIGILL

  - PR1401: Fix Zero build on 2.3.8

  - Fix offset problem in ICU LETableReference.

  - Change -Werror fix to preserve OpenJDK default.

  - PR1303: Correct #ifdef to #if

  - PR1404: Failure to bootstrap with ecj 4.2

  - Added url as source. Please see     http://en.opensuse.org/SourceUrls

  - icedtea-2.3.8-zero-patches.patch: remove patch not     applicable to zero compatible hotspot

  - java-1.7.0-openjdk-fork.patch: Add support for     architectures without fork syscall

  - java-1.7.0-openjdk-aarch64.patch: Add support for     aarch64

java-1_6_0-openjdk was updated to 1.12.5 (bnc#817157)

  - Security fixes

  - S6657673, CVE-2013-1518: Issues with JAXP

  - S7200507: Refactor Introspector internals

  - S8000724, CVE-2013-2417: Improve networking     serialization

  - S8001031, CVE-2013-2419: Better font processing

  - S8001040, CVE-2013-1537: Rework RMI model

  - S8001322: Refactor deserialization

  - S8001329, CVE-2013-1557: Augment RMI logging

  - S8003335: Better handling of Finalizer thread

  - S8003445: Adjust JAX-WS to focus on API

  - S8003543, CVE-2013-2415: Improve processing of MTOM     attachments

  - S8004261: Improve input validation

  - S8004336, CVE-2013-2431: Better handling of method     handle intrinsic frames

  - S8004986, CVE-2013-2383: Better handling of glyph table

  - S8004987, CVE-2013-2384: Improve font layout

  - S8004994, CVE-2013-1569: Improve checking of glyph table

  - S8005432: Update access to JAX-WS

  - S8005943: (process) Improved Runtime.exec

  - S8006309: More reliable control panel operation

  - S8006435, CVE-2013-2424: Improvements in JMX

  - S8006790: Improve checking for windows

  - S8006795: Improve font warning messages

  - S8007406: Improve accessibility of AccessBridge

  - S8007617, CVE-2013-2420: Better validation of images

  - S8007667, CVE-2013-2430: Better image reading

  - S8007918, CVE-2013-2429: Better image writing

  - S8009063, CVE-2013-2426: Improve reliability of     ConcurrentHashMap

  - S8009305, CVE-2013-0401: Improve AWT data transfer

  - S8009699, CVE-2013-2421: Methodhandle lookup

  - S8009814, CVE-2013-1488: Better driver management

  - S8009857, CVE-2013-2422: Problem with plugin

  - RH952389: Temporary files created with insecure     permissions

  - Backports

  - S7197906: BlockOffsetArray::power_to_cards_back() needs     to handle > 32 bit shifts

  - S7036559: ConcurrentHashMap footprint and contention     improvements

  - S5102804: Memory leak in Introspector.getBeanInfo(Class)     for custom BeanInfo: Class param (with WeakCache from     S6397609)

  - S6501644: sync LayoutEngine *code* structure to match     ICU

  - S6886358: layout code update

  - S6963811: Deadlock-prone locking changes in Introspector

  - S7017324: Kerning crash in JDK 7 since ICU layout update

  - S7064279: Introspector.getBeanInfo() should release some     resources in timely manner

  - S8004302: javax/xml/soap/Test7013971.java fails since     jdk6u39b01

  - S7133220: Additional patches to JAXP 1.4.5 update 1 for     7u4 (partial for S6657673)

  - S8009530: ICU Kern table support broken

  - Bug fixes

  - OJ3: Fix get_stack_bounds memory leak (alternate fix for     S7197906)

  - PR1362: Fedora 19 / rawhide FTBFS SIGILL

  - PR1338: Remove dependence on libXp

  - PR1339: Simplify the rhino class rewriter to avoid use     of concurrency

  - PR1336: Bootstrap failure on Fedora 17/18

  - PR1319: Correct #ifdef to #if

  - PR1402: Support glibc < 2.17 with AArch64 patch

  - Give xalan/xerces access to their own internal packages.

  - New features

  - JAXP, JAXWS & JAF supplied as patches rather than drops     to aid subsequent patching.

  - PR1380: Add AArch64 support to Zero

  - openjdk-7-src-b147-awt-crasher.patch (bnc#792951)

  - fix build for non-jit packages

According to its self-reported version number, the remote Junos Space version is prior to 13.3R1.8. It is, therefore, affected by multiple vulnerabilities in bundled third party software components :

  - Multiple vulnerabilities in RedHat JBoss application     server. (CVE-2010-0738, CVE-2010-1428, CVE-2010-1429,     CVE-2011-5245, CVE-2012-0818)

  - Multiple vulnerabilities in Oracle Java SE JDK.
    (CVE-2012-3143, CVE-2013-1537, CVE-2013-1557,     CVE-2013-2422)

  - Multiple vulnerabilities in Oracle MySQL server.
    (CVE-2013-1502, CVE-2013-1511, CVE-2013-1532,     CVE-2013-1544, CVE-2013-2375, CVE-2013-2376,     CVE-2013-2389, CVE-2013-2391, CVE-2013-2392,     CVE-2013-3783, CVE-2013-3793, CVE-2013-3794,     CVE-2013-3801, CVE-2013-3802, CVE-2013-3804,     CVE-2013-3805, CVE-2013-3808, CVE-2013-3809,     CVE-2013-3812, CVE-2013-3839)

  - Multiple vulnerabilities in Apache HTTP Server.
    (CVE-2013-1862, CVE-2013-1896)

  - Known hard-coded MySQL credentials. (CVE-2014-3413)

IBM Java 1.4.2 has been updated to SR13-FP17 fixing bugs and security issues.

http://www.ibm.com/developerworks/java/jdk/alerts/

ID	名稱	產品	系列	已發布	已更新	嚴重性
74990	openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0745-1)	Nessus	SuSE Local Security Checks	2014/6/13	2022/5/25	critical
74991	openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
80195	Juniper Junos Space < 13.3R1.8 Multiple Vulnerabilities (JSA10627)	Nessus	Junos Local Security Checks	2014/12/22	2022/5/25	critical
66854	SuSE 11.2 Security Update : Java 1.4.2 (SAT Patch Number 7793)	Nessus	SuSE Local Security Checks	2013/6/11	2021/1/19	critical
66856	SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 8601)	Nessus	SuSE Local Security Checks	2013/6/11	2021/1/19	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical