[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2016:1997-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":36,"duplicates":37,"related":38,"reserved_at":9,"published_at":50,"modified_at":51,"state":9,"summary":52,"references_raw":54,"kevs":163,"epss":9,"epss_history":164,"metrics":165,"affected":166},"SUSE-SU-2016:1997-1","Security update for java-1_7_0-openjdk\n\n\nThis update for java-1_7_0-openjdk fixes the following issues:\n\n- Update to 2.6.7 - OpenJDK 7u111\n  * Security fixes\n    - S8079718, CVE-2016-3458: IIOP Input Stream Hooking\n      (bsc#989732)\n    - S8145446, CVE-2016-3485: Perfect pipe placement (Windows\n      only)  (bsc#989734)\n    - S8147771: Construction of static protection domains under\n      Javax custom policy\n    - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)\n    - S8149962, CVE-2016-3508: Better delineation of XML processing\n      (bsc#989731)\n    - S8150752: Share Class Data\n    - S8151925: Font reference improvements\n    - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)\n    - S8155981, CVE-2016-3606: Bolster bytecode verification\n      (bsc#989722)\n    - S8155985, CVE-2016-3598: Persistent Parameter Processing\n      (bsc#989723)\n    - S8158571, CVE-2016-3610: Additional method handle validation\n      (bsc#989725)\n    - CVE-2016-3511 (bsc#989727)\n    - CVE-2016-3503 (bsc#989728)\n    - CVE-2016-3498 (bsc#989729)\n  * Import of OpenJDK 7 u111 build 0\n    - S6953295: Move few sun.security.{util, x509, pkcs} classes\n      used by keytool/jarsigner to another package\n    - S7060849: Eliminate pack200 build warnings\n    - S7064075: Security libraries don't build with\n      javac -Xlint:all,-deprecation -Werror\n    - S7069870: Parts of the JDK erroneously rely on generic array\n      initializers with diamond\n    - S7102686: Restructure timestamp code so that jars and modules\n      can more easily share the same code\n    - S7105780: Add SSLSocket client/SSLEngine server to templates\n      directory\n    - S7142339: PKCS7.java is needlessly creating SHA1PRNG\n      SecureRandom instances when timestamping is not done\n    - S7152582: PKCS11 tests should use the NSS libraries available\n      in the OS\n    - S7192202: Make sure keytool prints both unknown and\n      unparseable extensions\n    - S7194449: String resources for Key Tool and Policy Tool\n      should be in their respective packages\n    - S7196855: autotest.sh fails on ubuntu because libsoftokn.so\n      not found\n    - S7200682: TEST_BUG: keytool/autotest.sh still has problems\n      with libsoftokn.so\n    - S8002306: (se) Selector.open fails if invoked with thread\n      interrupt status set [win]\n    - S8009636: JARSigner including TimeStamp PolicyID\n      (TSAPolicyID) as defined in RFC3161\n    - S8019341: Update CookieHttpsClientTest to use the newer\n      framework.\n    - S8022228: Intermittent test failures in\n      sun/security/ssl/javax/net/ssl/NewAPIs\n    - S8022439: Fix lint warnings in sun.security.ec\n    - S8022594: Potential deadlock in \u003Cclinit> of\n      sun.nio.ch.Util/IOUtil\n    - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails\n      intermittently\n    - S8036612: [parfait] JNI exception pending in\n      jdk/src/windows/native/sun/security/mscapi/security.cpp\n    - S8037557: test SessionCacheSizeTests.java timeout\n    - S8038837: Add support to jarsigner for specifying timestamp\n      hash algorithm\n    - S8079410: Hotspot version to share the same update and build\n      version from JDK\n    - S8130735: javax.swing.TimerQueue: timer fires late when\n      another timer starts\n    - S8139436: sun.security.mscapi.KeyStore might load incomplete\n      data\n    - S8144313: Test SessionTimeOutTests can be timeout\n    - S8146387: Test SSLSession/SessionCacheSizeTests socket\n      accept timed out\n    - S8146669: Test SessionTimeOutTests fails intermittently\n    - S8146993: Several javax/management/remote/mandatory regression\n      tests fail after JDK-8138811\n    - S8147857: [TEST] RMIConnector logs attribute names incorrectly\n    - S8151841, PR3098: Build needs additional flags to compile\n      with GCC 6\n    - S8151876: (tz) Support tzdata2016d\n    - S8157077: 8u101 L10n resource file updates\n    - S8161262: Fix jdk build with gcc 4.1.2: -fno-strict-overflow\n      not known.\n  * Import of OpenJDK 7 u111 build 1\n    - S7081817: test/sun/security/provider/certpath/X509CertPath/IllegalCertificates.java failing\n    - S8140344: add support for 3 digit update release numbers\n    - S8145017: Add support for 3 digit hotspot minor version\n      numbers\n    - S8162344: The API changes made by CR 7064075 need to be\n      reverted\n  * Backports\n    - S2178143, PR2958: JVM crashes if the number of bound CPUs\n      changed during runtime\n    - S4900206, PR3101: Include worst-case rounding tests for Math\n      library functions\n    - S6260348, PR3067: GTK+ L&F JTextComponent not respecting\n      desktop caret blink rate\n    - S6934604, PR3075: enable parts of EliminateAutoBox by default\n    - S7043064, PR3020: sun/java2d/cmm/ tests failed against\n      RI b141 & b138-nightly\n    - S7051394, PR3020: NullPointerException when running\n      regression tests LoadProfileTest by using openjdk-7-b144\n    - S7086015, PR3013: fix\n      test/tools/javac/parser/netbeans/JavacParserTest.java\n    - S7119487, PR3013: JavacParserTest.java test fails on Windows\n      platforms\n    - S7124245, PR3020: [lcms] ColorConvertOp to color space\n      CS_GRAY apparently converts orange to 244,244,0\n    - S7159445, PR3013: (javac) emits inaccurate diagnostics for\n      enhanced for-loops\n    - S7175845, PR1437, RH1207129: 'jar uf' changes file\n      permissions unexpectedly\n    - S8005402, PR3020: Need to provide benchmarks for color\n      management\n    - S8005530, PR3020: [lcms] Improve performance of ColorConverOp\n      for default destinations\n    - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel is not\n      transferred from source to destination.\n    - S8013430, PR3020: REGRESSION:\n      closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadProfileTest.java\n      fails with java.io.StreamCorruptedException: invalid type\n      code: EE since 8b87\n    - S8014286, PR3075: failed java/lang/Math/DivModTests.java\n      after 6934604 changes\n    - S8014959, PR3075: assert(Compile::current()->live_nodes() \u003C (uint)MaxNodeLimit)\n      failed: Live Node limit exceeded limit\n    - S8019247, PR3075: SIGSEGV in compiled method\n      c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object\n    - S8024511, PR3020: Crash during color profile destruction\n    - S8025429, PR3020: [parfait] warnings from b107 for\n      sun.java2d.cmm: JNI exception pending\n    - S8026702, PR3020: Fix for 8025429 breaks jdk build on windows\n    - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for\n      Java_awt test suit\n    - S8047066, PR3020: Test test/sun/awt/image/bug8038000.java\n      fails with ClassCastException\n    - S8069181, PR3012, RH1015612: java.lang.AssertionError when\n      compiling JDK 1.4 code in JDK 8\n    - S8158260, PR2992, RH1341258: PPC64: unaligned Unsafe.getInt\n      can lead to the generation of illegal instructions (bsc#988651)\n    - S8159244, PR3075: Partially initialized string object created\n      by C2's string concat optimization may escape\n  * Bug fixes\n    - PR2799, RH1195203: Files are missing from resources.jar\n    - PR2900: Don't use WithSeed versions of NSS functions as they\n      don't fully process the seed\n    - PR3091: SystemTap is heavily confused by multiple JDKs\n    - PR3102: Extend 8022594 to AixPollPort\n    - PR3103: Handle case in clean-fonts where\n      linux.fontconfig.Gentoo.properties.old has not been created\n    - PR3111: Provide option to disable SystemTap tests\n    - PR3114: Don't assume system mime.types supports\n      text/x-java-source\n    - PR3115: Add check for elliptic curve cryptography\n      implementation\n    - PR3116: Add tests for Java debug info and source files\n    - PR3118: Path to agpl-3.0.txt not updated\n    - PR3119: Makefile handles cacerts as a symlink, but the\n      configure check doesn't\n  * AArch64 port\n    - S8148328, PR3100: aarch64: redundant lsr instructions in stub\n      code.\n    - S8148783, PR3100: aarch64: SEGV running SpecJBB2013\n    - S8148948, PR3100: aarch64: generate_copy_longs calls align()\n      incorrectly\n    - S8150045, PR3100: arraycopy causes segfaults in SATB during\n      garbage collection\n    - S8154537, PR3100: AArch64: some integer rotate instructions\n      are never emitted\n    - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess loads\n      in wrong mode\n    - S8157906, PR3100: aarch64: some more integer rotate\n      instructions are never emitted\n- Enable SunEC for SLE12 and Leap (bsc#982366)\n\n- Fix aarch64 running with 48 bits va space (bsc#984684)\n\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34],{"_key":15},"CVE-2016-3458",{"_key":17},"CVE-2016-3485",{"_key":19},"CVE-2016-3498",{"_key":21},"CVE-2016-3500",{"_key":23},"CVE-2016-3503",{"_key":25},"CVE-2016-3508",{"_key":27},"CVE-2016-3511",{"_key":29},"CVE-2016-3550",{"_key":31},"CVE-2016-3598",{"_key":33},"CVE-2016-3606",{"_key":35},"CVE-2016-3610",[],[],[39,40,41,42,43,44,45,46,47,48,49],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},"2016-08-09T11:33:08Z","2025-05-02T04:05:16.496468Z",{"cisa_kev":53,"cisa_ransomware":53,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[55,61,66,70,74,78,82,86,90,94,98,102,106,110,114,118,123,127,131,135,139,143,147,151,155,159],{"url":56,"sources":57,"tags":59},"https://www.suse.com/support/update/announcement/2016/suse-su-20161997-1/",[58],"osv_suse",[60],"Advisory",{"url":62,"sources":63,"tags":64},"https://bugzilla.suse.com/982366",[58],[65],"REPORT",{"url":67,"sources":68,"tags":69},"https://bugzilla.suse.com/984684",[58],[65],{"url":71,"sources":72,"tags":73},"https://bugzilla.suse.com/988651",[58],[65],{"url":75,"sources":76,"tags":77},"https://bugzilla.suse.com/989722",[58],[65],{"url":79,"sources":80,"tags":81},"https://bugzilla.suse.com/989723",[58],[65],{"url":83,"sources":84,"tags":85},"https://bugzilla.suse.com/989725",[58],[65],{"url":87,"sources":88,"tags":89},"https://bugzilla.suse.com/989727",[58],[65],{"url":91,"sources":92,"tags":93},"https://bugzilla.suse.com/989728",[58],[65],{"url":95,"sources":96,"tags":97},"https://bugzilla.suse.com/989729",[58],[65],{"url":99,"sources":100,"tags":101},"https://bugzilla.suse.com/989730",[58],[65],{"url":103,"sources":104,"tags":105},"https://bugzilla.suse.com/989731",[58],[65],{"url":107,"sources":108,"tags":109},"https://bugzilla.suse.com/989732",[58],[65],{"url":111,"sources":112,"tags":113},"https://bugzilla.suse.com/989733",[58],[65],{"url":115,"sources":116,"tags":117},"https://bugzilla.suse.com/989734",[58],[65],{"url":119,"sources":120,"tags":121},"https://www.suse.com/security/cve/CVE-2016-3458",[58],[122],"WEB",{"url":124,"sources":125,"tags":126},"https://www.suse.com/security/cve/CVE-2016-3485",[58],[122],{"url":128,"sources":129,"tags":130},"https://www.suse.com/security/cve/CVE-2016-3498",[58],[122],{"url":132,"sources":133,"tags":134},"https://www.suse.com/security/cve/CVE-2016-3500",[58],[122],{"url":136,"sources":137,"tags":138},"https://www.suse.com/security/cve/CVE-2016-3503",[58],[122],{"url":140,"sources":141,"tags":142},"https://www.suse.com/security/cve/CVE-2016-3508",[58],[122],{"url":144,"sources":145,"tags":146},"https://www.suse.com/security/cve/CVE-2016-3511",[58],[122],{"url":148,"sources":149,"tags":150},"https://www.suse.com/security/cve/CVE-2016-3550",[58],[122],{"url":152,"sources":153,"tags":154},"https://www.suse.com/security/cve/CVE-2016-3598",[58],[122],{"url":156,"sources":157,"tags":158},"https://www.suse.com/security/cve/CVE-2016-3606",[58],[122],{"url":160,"sources":161,"tags":162},"https://www.suse.com/security/cve/CVE-2016-3610",[58],[122],[],[],[],[167,180,184],{"ecosystem":168,"name":169,"vendor":170,"product":171,"cpe_part":9,"purl_type":172,"purl_namespace":170,"purl_name":171,"source":9,"versions":173},"SUSE Linux Enterprise","java-1_7_0-openjdk","suse","java-1_7_0-openjdk&distro=SUSE Linux Enterprise Desktop 12 SP1","rpm",[174],{"version":175,"is_range":176,"range_type":177,"version_start":9,"version_start_type":9,"version_end":178,"version_end_type":179,"fixed_in":9},"lt1_7_0_111_33_1",true,"ecosystem","1.7.0.111-33.1","excluding",{"ecosystem":168,"name":169,"vendor":170,"product":181,"cpe_part":9,"purl_type":172,"purl_namespace":170,"purl_name":181,"source":9,"versions":182},"java-1_7_0-openjdk&distro=SUSE Linux Enterprise Server 12 SP1",[183],{"version":175,"is_range":176,"range_type":177,"version_start":9,"version_start_type":9,"version_end":178,"version_end_type":179,"fixed_in":9},{"ecosystem":168,"name":169,"vendor":170,"product":185,"cpe_part":9,"purl_type":172,"purl_namespace":170,"purl_name":185,"source":9,"versions":186},"java-1_7_0-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1",[187],{"version":175,"is_range":176,"range_type":177,"version_start":9,"version_start_type":9,"version_end":178,"version_end_type":179,"fixed_in":9}]