Security update for java-1_7_1-ibm SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2280-1 Final 1 1 2017-08-29T06:07:07Z current 2017-08-29T06:07:07Z 2017-08-29T06:07:07Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for java-1_7_1-ibm This update for java-1_7_1-ibm fixes the following issues: - Version update to 7.1-4.10 [bsc#1053431] * CVE-2017-10111 CVE-2017-10110 CVE-2017-10107 CVE-2017-10101 CVE-2017-10096 CVE-2017-10090 CVE-2017-10089 CVE-2017-10087 CVE-2017-10102 CVE-2017-10116 CVE-2017-10074 CVE-2017-10115 CVE-2017-10067 CVE-2017-10125 CVE-2017-10243 CVE-2017-10109 CVE-2017-10108 CVE-2017-10053 CVE-2017-10105 CVE-2017-10081: Multiple unspecified vulnerabilities in multiple Java components could lead to code execution or sandbox escape More information can be found here: https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_18_2017_CPU The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2017-1395,SUSE-SLE-SAP-12-2017-1395,SUSE-SLE-SAP-12-SP1-2017-1395,SUSE-SLE-SDK-12-SP2-2017-1395,SUSE-SLE-SDK-12-SP3-2017-1395,SUSE-SLE-SERVER-12-2017-1395,SUSE-SLE-SERVER-12-SP1-2017-1395,SUSE-SLE-SERVER-12-SP2-2017-1395,SUSE-SLE-SERVER-12-SP3-2017-1395 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ Link for SUSE-SU-2017:2280-1 https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00069.html E-Mail link for SUSE-SU-2017:2280-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1053431 SUSE Bug 1053431 https://www.suse.com/security/cve/CVE-2017-10053/ SUSE CVE CVE-2017-10053 page https://www.suse.com/security/cve/CVE-2017-10067/ SUSE CVE CVE-2017-10067 page https://www.suse.com/security/cve/CVE-2017-10074/ SUSE CVE CVE-2017-10074 page https://www.suse.com/security/cve/CVE-2017-10081/ SUSE CVE CVE-2017-10081 page https://www.suse.com/security/cve/CVE-2017-10087/ SUSE CVE CVE-2017-10087 page https://www.suse.com/security/cve/CVE-2017-10089/ SUSE CVE CVE-2017-10089 page https://www.suse.com/security/cve/CVE-2017-10090/ SUSE CVE CVE-2017-10090 page https://www.suse.com/security/cve/CVE-2017-10096/ SUSE CVE CVE-2017-10096 page https://www.suse.com/security/cve/CVE-2017-10101/ SUSE CVE CVE-2017-10101 page https://www.suse.com/security/cve/CVE-2017-10102/ SUSE CVE CVE-2017-10102 page https://www.suse.com/security/cve/CVE-2017-10105/ SUSE CVE CVE-2017-10105 page https://www.suse.com/security/cve/CVE-2017-10107/ SUSE CVE CVE-2017-10107 page https://www.suse.com/security/cve/CVE-2017-10108/ SUSE CVE CVE-2017-10108 page https://www.suse.com/security/cve/CVE-2017-10109/ SUSE CVE CVE-2017-10109 page https://www.suse.com/security/cve/CVE-2017-10110/ SUSE CVE CVE-2017-10110 page https://www.suse.com/security/cve/CVE-2017-10111/ SUSE CVE CVE-2017-10111 page https://www.suse.com/security/cve/CVE-2017-10115/ SUSE CVE CVE-2017-10115 page https://www.suse.com/security/cve/CVE-2017-10116/ SUSE CVE CVE-2017-10116 page https://www.suse.com/security/cve/CVE-2017-10125/ SUSE CVE CVE-2017-10125 page https://www.suse.com/security/cve/CVE-2017-10243/ SUSE CVE CVE-2017-10243 page SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE OpenStack Cloud 6 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 as a component of SUSE OpenStack Cloud 6 java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 as a component of SUSE OpenStack Cloud 6 java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 as a component of SUSE OpenStack Cloud 6 java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 as a component of SUSE OpenStack Cloud 6 java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 as a component of SUSE OpenStack Cloud 6 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10053 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10053.html CVE-2017-10053 https://bugzilla.suse.com/1049305 SUSE Bug 1049305 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). CVE-2017-10067 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10067.html CVE-2017-10067 https://bugzilla.suse.com/1049306 SUSE Bug 1049306 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10074 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10074.html CVE-2017-10074 https://bugzilla.suse.com/1049307 SUSE Bug 1049307 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). CVE-2017-10081 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10081.html CVE-2017-10081 https://bugzilla.suse.com/1049309 SUSE Bug 1049309 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10087 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10087.html CVE-2017-10087 https://bugzilla.suse.com/1049311 SUSE Bug 1049311 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10089 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10089.html CVE-2017-10089 https://bugzilla.suse.com/1049312 SUSE Bug 1049312 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10090 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10090.html CVE-2017-10090 https://bugzilla.suse.com/1049313 SUSE Bug 1049313 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10096 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10096.html CVE-2017-10096 https://bugzilla.suse.com/1049314 SUSE Bug 1049314 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10101 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10101.html CVE-2017-10101 https://bugzilla.suse.com/1049315 SUSE Bug 1049315 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). CVE-2017-10102 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10102.html CVE-2017-10102 https://bugzilla.suse.com/1049316 SUSE Bug 1049316 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). CVE-2017-10105 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10105.html CVE-2017-10105 https://bugzilla.suse.com/1049317 SUSE Bug 1049317 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10107 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10107.html CVE-2017-10107 https://bugzilla.suse.com/1049318 SUSE Bug 1049318 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10108 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10108.html CVE-2017-10108 https://bugzilla.suse.com/1049319 SUSE Bug 1049319 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10109 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10109.html CVE-2017-10109 https://bugzilla.suse.com/1049320 SUSE Bug 1049320 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10110 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10110.html CVE-2017-10110 https://bugzilla.suse.com/1049321 SUSE Bug 1049321 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10111 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10111.html CVE-2017-10111 https://bugzilla.suse.com/1049322 SUSE Bug 1049322 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10115 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10115.html CVE-2017-10115 https://bugzilla.suse.com/1049324 SUSE Bug 1049324 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10116 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10116.html CVE-2017-10116 https://bugzilla.suse.com/1049325 SUSE Bug 1049325 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). CVE-2017-10125 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10125.html CVE-2017-10125 https://bugzilla.suse.com/1049327 SUSE Bug 1049327 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). CVE-2017-10243 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server 12-LTSS:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-alsa-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-jdbc-1.7.1_sr4.10-38.5.1 SUSE OpenStack Cloud 6:java-1_7_1-ibm-plugin-1.7.1_sr4.10-38.5.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172280-1/ https://www.suse.com/security/cve/CVE-2017-10243.html CVE-2017-10243 https://bugzilla.suse.com/1049332 SUSE Bug 1049332 https://bugzilla.suse.com/1049333 SUSE Bug 1049333