<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for IBM Java</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2015:1086-2</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2014-11-19T10:21:52Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2014-11-19T10:21:52Z</InitialReleaseDate>
    <CurrentReleaseDate>2014-11-19T10:21:52Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for IBM Java</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security 
issues.

These security issues has been fixed:

    * Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
      products, uses nondeterministic CBC padding, which makes it easier
      for man-in-the-middle attackers to obtain cleartext data via a
      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
      Java SE Embedded 7u60, allows remote attackers to affect
      confidentiality, integrity, and availability via vectors related to
      AWT (CVE-2014-6513).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
      allows remote attackers to affect confidentiality, integrity, and
      availability via unknown vectors related to Deployment, a different
      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
      (CVE-2014-6503).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
      allows remote attackers to affect confidentiality, integrity, and
      availability via unknown vectors related to Deployment, a different
      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
      (CVE-2014-6532).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
      allows remote attackers to affect confidentiality, integrity, and
      availability via unknown vectors related to Deployment, a different
      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
      (CVE-2014-4288).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
      allows remote attackers to affect confidentiality, integrity, and
      availability via unknown vectors related to Deployment, a different
      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
      (CVE-2014-6493).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
      when running on Firefox, allows remote attackers to affect
      confidentiality, integrity, and availability via unknown vectors
      related to Deployment (CVE-2014-6492).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
      allows local users to affect confidentiality, integrity, and
      availability via unknown vectors related to Deployment
      (CVE-2014-6458).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
      when running on Internet Explorer, allows local users to affect
      confidentiality, integrity, and availability via unknown vectors
      related to Deployment (CVE-2014-6466).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20, and Java SE Embedded 7u60, allows remote attackers to affect
      confidentiality, integrity, and availability via unknown vectors
      related to Libraries (CVE-2014-6506).
    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
      allows remote attackers to affect integrity via unknown vectors
      related to Deployment (CVE-2014-6515).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20 allows remote attackers to affect confidentiality via unknown
      vectors related to 2D (CVE-2014-6511).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20, and Java SE Embedded 7u60, allows remote attackers to affect
      confidentiality via unknown vectors related to Libraries
      (CVE-2014-6531).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
      remote attackers to affect integrity via unknown vectors related to
      Libraries (CVE-2014-6512).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
      remote attackers to affect confidentiality and integrity via vectors
      related to JSSE (CVE-2014-6457).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20, and Java SE Embedded 7u60, allows remote attackers to affect
      integrity via unknown vectors related to Libraries (CVE-2014-6502).
    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3
      allows remote attackers to affect integrity via unknown vectors
      related to Security (CVE-2014-6558).

More information can be found at 
http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014
&lt;http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014&gt;

Security Issues:

    * CVE-2014-3065
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065&gt;
    * CVE-2014-3566
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566&gt;
    * CVE-2014-6506
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506&gt;
    * CVE-2014-6511
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511&gt;
    * CVE-2014-6531
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531&gt;
    * CVE-2014-6512
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512&gt;
    * CVE-2014-6457
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457&gt;
    * CVE-2014-6502
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502&gt;
    * CVE-2014-6558
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558&gt;
    * CVE-2014-6513
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513&gt;
    * CVE-2014-6503
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503&gt;
    * CVE-2014-4288
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288&gt;
    * CVE-2014-6493
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493&gt;
    * CVE-2014-6532
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532&gt;
    * CVE-2014-6492
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492&gt;
    * CVE-2014-6458
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458&gt;
    * CVE-2014-6466
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466&gt;
    * CVE-2014-6515
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515&gt;
    * CVE-2014-6456
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456&gt;
    * CVE-2014-6476
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476&gt;
    * CVE-2014-6527
      &lt;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527&gt;

</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">sdksp3-java-1_6_0-ibm,slessp3-java-1_6_0-ibm</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      <Description>Link for SUSE-SU-2015:1086-2</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html</URL>
      <Description>E-Mail link for SUSE-SU-2015:1086-2</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/592934</URL>
      <Description>SUSE Bug 592934</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/817062</URL>
      <Description>SUSE Bug 817062</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/819288</URL>
      <Description>SUSE Bug 819288</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/823034</URL>
      <Description>SUSE Bug 823034</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/829212</URL>
      <Description>SUSE Bug 829212</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/849212</URL>
      <Description>SUSE Bug 849212</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/862064</URL>
      <Description>SUSE Bug 862064</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/877430</URL>
      <Description>SUSE Bug 877430</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/891700</URL>
      <Description>SUSE Bug 891700</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/904889</URL>
      <Description>SUSE Bug 904889</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/912434</URL>
      <Description>SUSE Bug 912434</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/912447</URL>
      <Description>SUSE Bug 912447</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/916265</URL>
      <Description>SUSE Bug 916265</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/916266</URL>
      <Description>SUSE Bug 916266</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/930365</URL>
      <Description>SUSE Bug 930365</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/931702</URL>
      <Description>SUSE Bug 931702</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-0401/</URL>
      <Description>SUSE CVE CVE-2013-0401 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1491/</URL>
      <Description>SUSE CVE CVE-2013-1491 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1500/</URL>
      <Description>SUSE CVE CVE-2013-1500 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1537/</URL>
      <Description>SUSE CVE CVE-2013-1537 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1540/</URL>
      <Description>SUSE CVE CVE-2013-1540 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1557/</URL>
      <Description>SUSE CVE CVE-2013-1557 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1563/</URL>
      <Description>SUSE CVE CVE-2013-1563 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1569/</URL>
      <Description>SUSE CVE CVE-2013-1569 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-1571/</URL>
      <Description>SUSE CVE CVE-2013-1571 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2383/</URL>
      <Description>SUSE CVE CVE-2013-2383 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2384/</URL>
      <Description>SUSE CVE CVE-2013-2384 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2394/</URL>
      <Description>SUSE CVE CVE-2013-2394 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2407/</URL>
      <Description>SUSE CVE CVE-2013-2407 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2412/</URL>
      <Description>SUSE CVE CVE-2013-2412 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2417/</URL>
      <Description>SUSE CVE CVE-2013-2417 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2418/</URL>
      <Description>SUSE CVE CVE-2013-2418 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2419/</URL>
      <Description>SUSE CVE CVE-2013-2419 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2420/</URL>
      <Description>SUSE CVE CVE-2013-2420 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2422/</URL>
      <Description>SUSE CVE CVE-2013-2422 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2424/</URL>
      <Description>SUSE CVE CVE-2013-2424 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2429/</URL>
      <Description>SUSE CVE CVE-2013-2429 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2430/</URL>
      <Description>SUSE CVE CVE-2013-2430 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2432/</URL>
      <Description>SUSE CVE CVE-2013-2432 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2433/</URL>
      <Description>SUSE CVE CVE-2013-2433 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2435/</URL>
      <Description>SUSE CVE CVE-2013-2435 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2437/</URL>
      <Description>SUSE CVE CVE-2013-2437 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2440/</URL>
      <Description>SUSE CVE CVE-2013-2440 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2442/</URL>
      <Description>SUSE CVE CVE-2013-2442 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2443/</URL>
      <Description>SUSE CVE CVE-2013-2443 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2444/</URL>
      <Description>SUSE CVE CVE-2013-2444 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2446/</URL>
      <Description>SUSE CVE CVE-2013-2446 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2447/</URL>
      <Description>SUSE CVE CVE-2013-2447 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2448/</URL>
      <Description>SUSE CVE CVE-2013-2448 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2450/</URL>
      <Description>SUSE CVE CVE-2013-2450 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2451/</URL>
      <Description>SUSE CVE CVE-2013-2451 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2452/</URL>
      <Description>SUSE CVE CVE-2013-2452 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2453/</URL>
      <Description>SUSE CVE CVE-2013-2453 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2454/</URL>
      <Description>SUSE CVE CVE-2013-2454 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2455/</URL>
      <Description>SUSE CVE CVE-2013-2455 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2456/</URL>
      <Description>SUSE CVE CVE-2013-2456 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2457/</URL>
      <Description>SUSE CVE CVE-2013-2457 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2459/</URL>
      <Description>SUSE CVE CVE-2013-2459 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2463/</URL>
      <Description>SUSE CVE CVE-2013-2463 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2464/</URL>
      <Description>SUSE CVE CVE-2013-2464 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2465/</URL>
      <Description>SUSE CVE CVE-2013-2465 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2466/</URL>
      <Description>SUSE CVE CVE-2013-2466 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2468/</URL>
      <Description>SUSE CVE CVE-2013-2468 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2469/</URL>
      <Description>SUSE CVE CVE-2013-2469 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2470/</URL>
      <Description>SUSE CVE CVE-2013-2470 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2471/</URL>
      <Description>SUSE CVE CVE-2013-2471 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2472/</URL>
      <Description>SUSE CVE CVE-2013-2472 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-2473/</URL>
      <Description>SUSE CVE CVE-2013-2473 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-3009/</URL>
      <Description>SUSE CVE CVE-2013-3009 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-3011/</URL>
      <Description>SUSE CVE CVE-2013-3011 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-3012/</URL>
      <Description>SUSE CVE CVE-2013-3012 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-3743/</URL>
      <Description>SUSE CVE CVE-2013-3743 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-3829/</URL>
      <Description>SUSE CVE CVE-2013-3829 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-4002/</URL>
      <Description>SUSE CVE CVE-2013-4002 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-4041/</URL>
      <Description>SUSE CVE CVE-2013-4041 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5372/</URL>
      <Description>SUSE CVE CVE-2013-5372 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5375/</URL>
      <Description>SUSE CVE CVE-2013-5375 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5456/</URL>
      <Description>SUSE CVE CVE-2013-5456 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5457/</URL>
      <Description>SUSE CVE CVE-2013-5457 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5458/</URL>
      <Description>SUSE CVE CVE-2013-5458 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5772/</URL>
      <Description>SUSE CVE CVE-2013-5772 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5774/</URL>
      <Description>SUSE CVE CVE-2013-5774 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5776/</URL>
      <Description>SUSE CVE CVE-2013-5776 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5778/</URL>
      <Description>SUSE CVE CVE-2013-5778 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5780/</URL>
      <Description>SUSE CVE CVE-2013-5780 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5782/</URL>
      <Description>SUSE CVE CVE-2013-5782 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5783/</URL>
      <Description>SUSE CVE CVE-2013-5783 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5784/</URL>
      <Description>SUSE CVE CVE-2013-5784 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5787/</URL>
      <Description>SUSE CVE CVE-2013-5787 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5788/</URL>
      <Description>SUSE CVE CVE-2013-5788 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5789/</URL>
      <Description>SUSE CVE CVE-2013-5789 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5790/</URL>
      <Description>SUSE CVE CVE-2013-5790 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5797/</URL>
      <Description>SUSE CVE CVE-2013-5797 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5800/</URL>
      <Description>SUSE CVE CVE-2013-5800 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5801/</URL>
      <Description>SUSE CVE CVE-2013-5801 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5802/</URL>
      <Description>SUSE CVE CVE-2013-5802 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5803/</URL>
      <Description>SUSE CVE CVE-2013-5803 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5804/</URL>
      <Description>SUSE CVE CVE-2013-5804 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5809/</URL>
      <Description>SUSE CVE CVE-2013-5809 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5812/</URL>
      <Description>SUSE CVE CVE-2013-5812 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5814/</URL>
      <Description>SUSE CVE CVE-2013-5814 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5817/</URL>
      <Description>SUSE CVE CVE-2013-5817 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5818/</URL>
      <Description>SUSE CVE CVE-2013-5818 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5819/</URL>
      <Description>SUSE CVE CVE-2013-5819 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5820/</URL>
      <Description>SUSE CVE CVE-2013-5820 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5823/</URL>
      <Description>SUSE CVE CVE-2013-5823 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5824/</URL>
      <Description>SUSE CVE CVE-2013-5824 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5825/</URL>
      <Description>SUSE CVE CVE-2013-5825 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5829/</URL>
      <Description>SUSE CVE CVE-2013-5829 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5830/</URL>
      <Description>SUSE CVE CVE-2013-5830 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5831/</URL>
      <Description>SUSE CVE CVE-2013-5831 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5832/</URL>
      <Description>SUSE CVE CVE-2013-5832 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5838/</URL>
      <Description>SUSE CVE CVE-2013-5838 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5840/</URL>
      <Description>SUSE CVE CVE-2013-5840 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5842/</URL>
      <Description>SUSE CVE CVE-2013-5842 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5843/</URL>
      <Description>SUSE CVE CVE-2013-5843 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5848/</URL>
      <Description>SUSE CVE CVE-2013-5848 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5849/</URL>
      <Description>SUSE CVE CVE-2013-5849 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5850/</URL>
      <Description>SUSE CVE CVE-2013-5850 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5851/</URL>
      <Description>SUSE CVE CVE-2013-5851 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5878/</URL>
      <Description>SUSE CVE CVE-2013-5878 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5884/</URL>
      <Description>SUSE CVE CVE-2013-5884 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5887/</URL>
      <Description>SUSE CVE CVE-2013-5887 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5888/</URL>
      <Description>SUSE CVE CVE-2013-5888 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5889/</URL>
      <Description>SUSE CVE CVE-2013-5889 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5896/</URL>
      <Description>SUSE CVE CVE-2013-5896 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5898/</URL>
      <Description>SUSE CVE CVE-2013-5898 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5899/</URL>
      <Description>SUSE CVE CVE-2013-5899 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5907/</URL>
      <Description>SUSE CVE CVE-2013-5907 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-5910/</URL>
      <Description>SUSE CVE CVE-2013-5910 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-6629/</URL>
      <Description>SUSE CVE CVE-2013-6629 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2013-6954/</URL>
      <Description>SUSE CVE CVE-2013-6954 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0368/</URL>
      <Description>SUSE CVE CVE-2014-0368 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0373/</URL>
      <Description>SUSE CVE CVE-2014-0373 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0375/</URL>
      <Description>SUSE CVE CVE-2014-0375 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0376/</URL>
      <Description>SUSE CVE CVE-2014-0376 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0387/</URL>
      <Description>SUSE CVE CVE-2014-0387 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0403/</URL>
      <Description>SUSE CVE CVE-2014-0403 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0410/</URL>
      <Description>SUSE CVE CVE-2014-0410 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0411/</URL>
      <Description>SUSE CVE CVE-2014-0411 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0415/</URL>
      <Description>SUSE CVE CVE-2014-0415 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0416/</URL>
      <Description>SUSE CVE CVE-2014-0416 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0417/</URL>
      <Description>SUSE CVE CVE-2014-0417 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0422/</URL>
      <Description>SUSE CVE CVE-2014-0422 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0423/</URL>
      <Description>SUSE CVE CVE-2014-0423 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0424/</URL>
      <Description>SUSE CVE CVE-2014-0424 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0428/</URL>
      <Description>SUSE CVE CVE-2014-0428 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0429/</URL>
      <Description>SUSE CVE CVE-2014-0429 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0446/</URL>
      <Description>SUSE CVE CVE-2014-0446 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0449/</URL>
      <Description>SUSE CVE CVE-2014-0449 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0451/</URL>
      <Description>SUSE CVE CVE-2014-0451 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0452/</URL>
      <Description>SUSE CVE CVE-2014-0452 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0453/</URL>
      <Description>SUSE CVE CVE-2014-0453 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0457/</URL>
      <Description>SUSE CVE CVE-2014-0457 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0458/</URL>
      <Description>SUSE CVE CVE-2014-0458 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0459/</URL>
      <Description>SUSE CVE CVE-2014-0459 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0460/</URL>
      <Description>SUSE CVE CVE-2014-0460 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0461/</URL>
      <Description>SUSE CVE CVE-2014-0461 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-0878/</URL>
      <Description>SUSE CVE CVE-2014-0878 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-1876/</URL>
      <Description>SUSE CVE CVE-2014-1876 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2398/</URL>
      <Description>SUSE CVE CVE-2014-2398 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2401/</URL>
      <Description>SUSE CVE CVE-2014-2401 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2409/</URL>
      <Description>SUSE CVE CVE-2014-2409 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2412/</URL>
      <Description>SUSE CVE CVE-2014-2412 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2414/</URL>
      <Description>SUSE CVE CVE-2014-2414 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2420/</URL>
      <Description>SUSE CVE CVE-2014-2420 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2421/</URL>
      <Description>SUSE CVE CVE-2014-2421 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2423/</URL>
      <Description>SUSE CVE CVE-2014-2423 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2427/</URL>
      <Description>SUSE CVE CVE-2014-2427 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-2428/</URL>
      <Description>SUSE CVE CVE-2014-2428 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-3065/</URL>
      <Description>SUSE CVE CVE-2014-3065 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-3566/</URL>
      <Description>SUSE CVE CVE-2014-3566 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4209/</URL>
      <Description>SUSE CVE CVE-2014-4209 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4218/</URL>
      <Description>SUSE CVE CVE-2014-4218 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4219/</URL>
      <Description>SUSE CVE CVE-2014-4219 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4227/</URL>
      <Description>SUSE CVE CVE-2014-4227 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4244/</URL>
      <Description>SUSE CVE CVE-2014-4244 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4252/</URL>
      <Description>SUSE CVE CVE-2014-4252 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4262/</URL>
      <Description>SUSE CVE CVE-2014-4262 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4263/</URL>
      <Description>SUSE CVE CVE-2014-4263 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4265/</URL>
      <Description>SUSE CVE CVE-2014-4265 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4268/</URL>
      <Description>SUSE CVE CVE-2014-4268 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-4288/</URL>
      <Description>SUSE CVE CVE-2014-4288 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6456/</URL>
      <Description>SUSE CVE CVE-2014-6456 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6457/</URL>
      <Description>SUSE CVE CVE-2014-6457 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6458/</URL>
      <Description>SUSE CVE CVE-2014-6458 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6466/</URL>
      <Description>SUSE CVE CVE-2014-6466 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6476/</URL>
      <Description>SUSE CVE CVE-2014-6476 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6492/</URL>
      <Description>SUSE CVE CVE-2014-6492 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6493/</URL>
      <Description>SUSE CVE CVE-2014-6493 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6502/</URL>
      <Description>SUSE CVE CVE-2014-6502 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6503/</URL>
      <Description>SUSE CVE CVE-2014-6503 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6506/</URL>
      <Description>SUSE CVE CVE-2014-6506 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6511/</URL>
      <Description>SUSE CVE CVE-2014-6511 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6512/</URL>
      <Description>SUSE CVE CVE-2014-6512 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6513/</URL>
      <Description>SUSE CVE CVE-2014-6513 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6515/</URL>
      <Description>SUSE CVE CVE-2014-6515 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6527/</URL>
      <Description>SUSE CVE CVE-2014-6527 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6531/</URL>
      <Description>SUSE CVE CVE-2014-6531 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6532/</URL>
      <Description>SUSE CVE CVE-2014-6532 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-6558/</URL>
      <Description>SUSE CVE CVE-2014-6558 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-8891/</URL>
      <Description>SUSE CVE CVE-2014-8891 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-8892/</URL>
      <Description>SUSE CVE CVE-2014-8892 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0138/</URL>
      <Description>SUSE CVE CVE-2015-0138 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0192/</URL>
      <Description>SUSE CVE CVE-2015-0192 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0204/</URL>
      <Description>SUSE CVE CVE-2015-0204 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0458/</URL>
      <Description>SUSE CVE CVE-2015-0458 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0459/</URL>
      <Description>SUSE CVE CVE-2015-0459 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0469/</URL>
      <Description>SUSE CVE CVE-2015-0469 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0477/</URL>
      <Description>SUSE CVE CVE-2015-0477 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0478/</URL>
      <Description>SUSE CVE CVE-2015-0478 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0480/</URL>
      <Description>SUSE CVE CVE-2015-0480 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0488/</URL>
      <Description>SUSE CVE CVE-2015-0488 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0491/</URL>
      <Description>SUSE CVE CVE-2015-0491 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-1914/</URL>
      <Description>SUSE CVE CVE-2015-1914 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-2808/</URL>
      <Description>SUSE CVE CVE-2015-2808 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3" CPE="cpe:/o:suse:suse_sles:11:sp3">SUSE Linux Enterprise Server 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3-TERADATA">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA" CPE="cpe:/o:suse:sles:11:sp3:teradata">SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3" CPE="cpe:/o:suse:sles_sap:11:sp3">SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3" CPE="cpe:/a:suse:sle-sdk:11:sp3">SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-1.6.0_sr16.2-0.3.1">
      <FullProductName ProductID="java-1_6_0-ibm-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1">
      <FullProductName ProductID="java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1">
      <FullProductName ProductID="java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1">
      <FullProductName ProductID="java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1">
      <FullProductName ProductID="java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1">
      <FullProductName ProductID="java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</FullProductName>
    </Branch>
    <Relationship ProductReference="java-1_6_0-ibm-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1">java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.</Note>
    </Notes>
    <CVE>CVE-2013-0401</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-0401.html</URL>
        <Description>CVE-2013-0401</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.</Note>
    </Notes>
    <CVE>CVE-2013-1491</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1491.html</URL>
        <Description>CVE-2013-1491</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.</Note>
    </Notes>
    <CVE>CVE-2013-1500</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>8.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:C/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1500.html</URL>
        <Description>CVE-2013-1500</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.</Note>
    </Notes>
    <CVE>CVE-2013-1537</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1537.html</URL>
        <Description>CVE-2013-1537</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433.</Note>
    </Notes>
    <CVE>CVE-2013-1540</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1540.html</URL>
        <Description>CVE-2013-1540</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.</Note>
    </Notes>
    <CVE>CVE-2013-1557</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1557.html</URL>
        <Description>CVE-2013-1557</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.</Note>
    </Notes>
    <CVE>CVE-2013-1563</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1563.html</URL>
        <Description>CVE-2013-1563</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.</Note>
    </Notes>
    <CVE>CVE-2013-1569</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1569.html</URL>
        <Description>CVE-2013-1569</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.</Note>
    </Notes>
    <CVE>CVE-2013-1571</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-1571.html</URL>
        <Description>CVE-2013-1571</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/824397</URL>
        <Description>SUSE Bug 824397</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.</Note>
    </Notes>
    <CVE>CVE-2013-2383</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2383.html</URL>
        <Description>CVE-2013-2383</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.</Note>
    </Notes>
    <CVE>CVE-2013-2384</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2384.html</URL>
        <Description>CVE-2013-2384</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.</Note>
    </Notes>
    <CVE>CVE-2013-2394</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2394.html</URL>
        <Description>CVE-2013-2394</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."</Note>
    </Notes>
    <CVE>CVE-2013-2407</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2407.html</URL>
        <Description>CVE-2013-2407</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.</Note>
    </Notes>
    <CVE>CVE-2013-2412</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2412.html</URL>
        <Description>CVE-2013-2412</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.</Note>
    </Notes>
    <CVE>CVE-2013-2417</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2417.html</URL>
        <Description>CVE-2013-2417</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-2418</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2418.html</URL>
        <Description>CVE-2013-2418</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.</Note>
    </Notes>
    <CVE>CVE-2013-2419</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2419.html</URL>
        <Description>CVE-2013-2419</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.</Note>
    </Notes>
    <CVE>CVE-2013-2420</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2420.html</URL>
        <Description>CVE-2013-2420</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper method-invocation restrictions by the MethodUtil trampoline class, which allows remote attackers to bypass the Java sandbox.</Note>
    </Notes>
    <CVE>CVE-2013-2422</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2422.html</URL>
        <Description>CVE-2013-2422</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.</Note>
    </Notes>
    <CVE>CVE-2013-2424</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2424.html</URL>
        <Description>CVE-2013-2424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption.</Note>
    </Notes>
    <CVE>CVE-2013-2429</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2429.html</URL>
        <Description>CVE-2013-2429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code.</Note>
    </Notes>
    <CVE>CVE-2013-2430</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2430.html</URL>
        <Description>CVE-2013-2430</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/816720</URL>
        <Description>SUSE Bug 816720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/817157</URL>
        <Description>SUSE Bug 817157</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.</Note>
    </Notes>
    <CVE>CVE-2013-2432</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2432.html</URL>
        <Description>CVE-2013-2432</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.</Note>
    </Notes>
    <CVE>CVE-2013-2433</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2433.html</URL>
        <Description>CVE-2013-2433</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2440.</Note>
    </Notes>
    <CVE>CVE-2013-2435</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2435.html</URL>
        <Description>CVE-2013-2435</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-2437</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2437.html</URL>
        <Description>CVE-2013-2437</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2435.</Note>
    </Notes>
    <CVE>CVE-2013-2440</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2440.html</URL>
        <Description>CVE-2013-2440</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/819288</URL>
        <Description>SUSE Bug 819288</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.</Note>
    </Notes>
    <CVE>CVE-2013-2442</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2442.html</URL>
        <Description>CVE-2013-2442</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect "checking order" within the AccessControlContext class.</Note>
    </Notes>
    <CVE>CVE-2013-2443</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2443.html</URL>
        <Description>CVE-2013-2443</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.</Note>
    </Notes>
    <CVE>CVE-2013-2444</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2444.html</URL>
        <Description>CVE-2013-2444</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.</Note>
    </Notes>
    <CVE>CVE-2013-2446</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2446.html</URL>
        <Description>CVE-2013-2446</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.</Note>
    </Notes>
    <CVE>CVE-2013-2447</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2447.html</URL>
        <Description>CVE-2013-2447</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."</Note>
    </Notes>
    <CVE>CVE-2013-2448</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2448.html</URL>
        <Description>CVE-2013-2448</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.</Note>
    </Notes>
    <CVE>CVE-2013-2450</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2450.html</URL>
        <Description>CVE-2013-2450</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.</Note>
    </Notes>
    <CVE>CVE-2013-2451</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2451.html</URL>
        <Description>CVE-2013-2451</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.</Note>
    </Notes>
    <CVE>CVE-2013-2452</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2452.html</URL>
        <Description>CVE-2013-2452</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.</Note>
    </Notes>
    <CVE>CVE-2013-2453</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2453.html</URL>
        <Description>CVE-2013-2453</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="38">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.</Note>
    </Notes>
    <CVE>CVE-2013-2454</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2454.html</URL>
        <Description>CVE-2013-2454</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="39">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.</Note>
    </Notes>
    <CVE>CVE-2013-2455</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2455.html</URL>
        <Description>CVE-2013-2455</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="40">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.</Note>
    </Notes>
    <CVE>CVE-2013-2456</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2456.html</URL>
        <Description>CVE-2013-2456</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="41">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.</Note>
    </Notes>
    <CVE>CVE-2013-2457</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2457.html</URL>
        <Description>CVE-2013-2457</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="42">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."</Note>
    </Notes>
    <CVE>CVE-2013-2459</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2459.html</URL>
        <Description>CVE-2013-2459</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="43">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.</Note>
    </Notes>
    <CVE>CVE-2013-2463</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2463.html</URL>
        <Description>CVE-2013-2463</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="44">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.</Note>
    </Notes>
    <CVE>CVE-2013-2464</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2464.html</URL>
        <Description>CVE-2013-2464</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="45">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.</Note>
    </Notes>
    <CVE>CVE-2013-2465</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2465.html</URL>
        <Description>CVE-2013-2465</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="46">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.</Note>
    </Notes>
    <CVE>CVE-2013-2466</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2466.html</URL>
        <Description>CVE-2013-2466</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="47">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.</Note>
    </Notes>
    <CVE>CVE-2013-2468</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2468.html</URL>
        <Description>CVE-2013-2468</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="48">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.</Note>
    </Notes>
    <CVE>CVE-2013-2469</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2469.html</URL>
        <Description>CVE-2013-2469</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="49">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."</Note>
    </Notes>
    <CVE>CVE-2013-2470</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2470.html</URL>
        <Description>CVE-2013-2470</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="50">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."</Note>
    </Notes>
    <CVE>CVE-2013-2471</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2471.html</URL>
        <Description>CVE-2013-2471</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="51">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.</Note>
    </Notes>
    <CVE>CVE-2013-2472</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2472.html</URL>
        <Description>CVE-2013-2472</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="52">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.</Note>
    </Notes>
    <CVE>CVE-2013-2473</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-2473.html</URL>
        <Description>CVE-2013-2473</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/828665</URL>
        <Description>SUSE Bug 828665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829708</URL>
        <Description>SUSE Bug 829708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="53">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.</Note>
    </Notes>
    <CVE>CVE-2013-3009</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-3009.html</URL>
        <Description>CVE-2013-3009</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/977650</URL>
        <Description>SUSE Bug 977650</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="54">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012.</Note>
    </Notes>
    <CVE>CVE-2013-3011</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-3011.html</URL>
        <Description>CVE-2013-3011</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="55">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3011.</Note>
    </Notes>
    <CVE>CVE-2013-3012</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-3012.html</URL>
        <Description>CVE-2013-3012</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="56">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.</Note>
    </Notes>
    <CVE>CVE-2013-3743</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-3743.html</URL>
        <Description>CVE-2013-3743</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/825624</URL>
        <Description>SUSE Bug 825624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="57">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2013-3829</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-3829.html</URL>
        <Description>CVE-2013-3829</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="58">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.</Note>
    </Notes>
    <CVE>CVE-2013-4002</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-4002.html</URL>
        <Description>CVE-2013-4002</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/829212</URL>
        <Description>SUSE Bug 829212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="59">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2013-4041</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-4041.html</URL>
        <Description>CVE-2013-4041</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="60">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.</Note>
    </Notes>
    <CVE>CVE-2013-5372</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5372.html</URL>
        <Description>CVE-2013-5372</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="61">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.</Note>
    </Notes>
    <CVE>CVE-2013-5375</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5375.html</URL>
        <Description>CVE-2013-5375</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="62">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block.</Note>
    </Notes>
    <CVE>CVE-2013-5456</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5456.html</URL>
        <Description>CVE-2013-5456</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/977646</URL>
        <Description>SUSE Bug 977646</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/981057</URL>
        <Description>SUSE Bug 981057</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/981060</URL>
        <Description>SUSE Bug 981060</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/981087</URL>
        <Description>SUSE Bug 981087</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="63">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2013-5457</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5457.html</URL>
        <Description>CVE-2013-5457</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="64">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2013-5458</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5458.html</URL>
        <Description>CVE-2013-5458</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="65">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.</Note>
    </Notes>
    <CVE>CVE-2013-5772</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5772.html</URL>
        <Description>CVE-2013-5772</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="66">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2013-5774</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5774.html</URL>
        <Description>CVE-2013-5774</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="67">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5776</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5776.html</URL>
        <Description>CVE-2013-5776</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="68">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2013-5778</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5778.html</URL>
        <Description>CVE-2013-5778</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="69">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2013-5780</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5780.html</URL>
        <Description>CVE-2013-5780</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="70">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2013-5782</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5782.html</URL>
        <Description>CVE-2013-5782</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="71">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Swing.</Note>
    </Notes>
    <CVE>CVE-2013-5783</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5783.html</URL>
        <Description>CVE-2013-5783</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="72">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.</Note>
    </Notes>
    <CVE>CVE-2013-5784</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5784.html</URL>
        <Description>CVE-2013-5784</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="73">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.</Note>
    </Notes>
    <CVE>CVE-2013-5787</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5787.html</URL>
        <Description>CVE-2013-5787</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="74">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5788</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5788.html</URL>
        <Description>CVE-2013-5788</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="75">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.</Note>
    </Notes>
    <CVE>CVE-2013-5789</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5789.html</URL>
        <Description>CVE-2013-5789</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="76">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS.</Note>
    </Notes>
    <CVE>CVE-2013-5790</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5790.html</URL>
        <Description>CVE-2013-5790</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="77">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.</Note>
    </Notes>
    <CVE>CVE-2013-5797</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5797.html</URL>
        <Description>CVE-2013-5797</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="78">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.</Note>
    </Notes>
    <CVE>CVE-2013-5800</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5800.html</URL>
        <Description>CVE-2013-5800</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="79">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2013-5801</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5801.html</URL>
        <Description>CVE-2013-5801</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="80">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.</Note>
    </Notes>
    <CVE>CVE-2013-5802</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5802.html</URL>
        <Description>CVE-2013-5802</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="81">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS.</Note>
    </Notes>
    <CVE>CVE-2013-5803</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5803.html</URL>
        <Description>CVE-2013-5803</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="82">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.</Note>
    </Notes>
    <CVE>CVE-2013-5804</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5804.html</URL>
        <Description>CVE-2013-5804</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="83">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829.</Note>
    </Notes>
    <CVE>CVE-2013-5809</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5809.html</URL>
        <Description>CVE-2013-5809</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="84">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5812</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5812.html</URL>
        <Description>CVE-2013-5812</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="85">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.</Note>
    </Notes>
    <CVE>CVE-2013-5814</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5814.html</URL>
        <Description>CVE-2013-5814</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="86">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.</Note>
    </Notes>
    <CVE>CVE-2013-5817</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5817.html</URL>
        <Description>CVE-2013-5817</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="87">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5819 and CVE-2013-5831.</Note>
    </Notes>
    <CVE>CVE-2013-5818</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5818.html</URL>
        <Description>CVE-2013-5818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="88">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831.</Note>
    </Notes>
    <CVE>CVE-2013-5819</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5819.html</URL>
        <Description>CVE-2013-5819</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="89">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.</Note>
    </Notes>
    <CVE>CVE-2013-5820</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5820.html</URL>
        <Description>CVE-2013-5820</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="90">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.</Note>
    </Notes>
    <CVE>CVE-2013-5823</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5823.html</URL>
        <Description>CVE-2013-5823</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="91">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5832, and CVE-2013-5852.</Note>
    </Notes>
    <CVE>CVE-2013-5824</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5824.html</URL>
        <Description>CVE-2013-5824</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="92">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP.</Note>
    </Notes>
    <CVE>CVE-2013-5825</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5825.html</URL>
        <Description>CVE-2013-5825</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="93">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.</Note>
    </Notes>
    <CVE>CVE-2013-5829</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5829.html</URL>
        <Description>CVE-2013-5829</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="94">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2013-5830</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5830.html</URL>
        <Description>CVE-2013-5830</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="95">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5819.</Note>
    </Notes>
    <CVE>CVE-2013-5831</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5831.html</URL>
        <Description>CVE-2013-5831</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="96">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5852.</Note>
    </Notes>
    <CVE>CVE-2013-5832</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5832.html</URL>
        <Description>CVE-2013-5832</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="97">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2013-5838</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5838.html</URL>
        <Description>CVE-2013-5838</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/972468</URL>
        <Description>SUSE Bug 972468</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="98">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2013-5840</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5840.html</URL>
        <Description>CVE-2013-5840</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="99">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.</Note>
    </Notes>
    <CVE>CVE-2013-5842</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5842.html</URL>
        <Description>CVE-2013-5842</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="100">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2013-5843</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5843.html</URL>
        <Description>CVE-2013-5843</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="101">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5848</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5848.html</URL>
        <Description>CVE-2013-5848</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="102">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to AWT.</Note>
    </Notes>
    <CVE>CVE-2013-5849</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5849.html</URL>
        <Description>CVE-2013-5849</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="103">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842.</Note>
    </Notes>
    <CVE>CVE-2013-5850</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5850.html</URL>
        <Description>CVE-2013-5850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="104">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.</Note>
    </Notes>
    <CVE>CVE-2013-5851</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5851.html</URL>
        <Description>CVE-2013-5851</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846177</URL>
        <Description>SUSE Bug 846177</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/846999</URL>
        <Description>SUSE Bug 846999</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/849212</URL>
        <Description>SUSE Bug 849212</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/852367</URL>
        <Description>SUSE Bug 852367</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="105">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU.  Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.</Note>
    </Notes>
    <CVE>CVE-2013-5878</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5878.html</URL>
        <Description>CVE-2013-5878</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="106">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.</Note>
    </Notes>
    <CVE>CVE-2013-5884</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5884.html</URL>
        <Description>CVE-2013-5884</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="107">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5887</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5887.html</URL>
        <Description>CVE-2013-5887</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="108">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5888</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5888.html</URL>
        <Description>CVE-2013-5888</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="109">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.</Note>
    </Notes>
    <CVE>CVE-2013-5889</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5889.html</URL>
        <Description>CVE-2013-5889</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="110">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.</Note>
    </Notes>
    <CVE>CVE-2013-5896</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5896.html</URL>
        <Description>CVE-2013-5896</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="111">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-0375 and CVE-2014-0403.</Note>
    </Notes>
    <CVE>CVE-2013-5898</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5898.html</URL>
        <Description>CVE-2013-5898</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="112">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2013-5899</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5899.html</URL>
        <Description>CVE-2013-5899</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="113">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.</Note>
    </Notes>
    <CVE>CVE-2013-5907</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5907.html</URL>
        <Description>CVE-2013-5907</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="114">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.</Note>
    </Notes>
    <CVE>CVE-2013-5910</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-5910.html</URL>
        <Description>CVE-2013-5910</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="115">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.</Note>
    </Notes>
    <CVE>CVE-2013-6629</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>5.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-6629.html</URL>
        <Description>CVE-2013-6629</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/850430</URL>
        <Description>SUSE Bug 850430</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/880246</URL>
        <Description>SUSE Bug 880246</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="116">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.</Note>
    </Notes>
    <CVE>CVE-2013-6954</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2013-6954.html</URL>
        <Description>CVE-2013-6954</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/856522</URL>
        <Description>SUSE Bug 856522</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="117">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.</Note>
    </Notes>
    <CVE>CVE-2014-0368</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0368.html</URL>
        <Description>CVE-2014-0368</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="118">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.</Note>
    </Notes>
    <CVE>CVE-2014-0373</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0373.html</URL>
        <Description>CVE-2014-0373</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="119">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.</Note>
    </Notes>
    <CVE>CVE-2014-0375</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0375.html</URL>
        <Description>CVE-2014-0375</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="120">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories."</Note>
    </Notes>
    <CVE>CVE-2014-0376</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0376.html</URL>
        <Description>CVE-2014-0376</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="121">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-0387</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0387.html</URL>
        <Description>CVE-2014-0387</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="122">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375.</Note>
    </Notes>
    <CVE>CVE-2014-0403</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0403.html</URL>
        <Description>CVE-2014-0403</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="123">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424.</Note>
    </Notes>
    <CVE>CVE-2014-0410</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0410.html</URL>
        <Description>CVE-2014-0410</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="124">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.</Note>
    </Notes>
    <CVE>CVE-2014-0411</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0411.html</URL>
        <Description>CVE-2014-0411</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="125">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424.</Note>
    </Notes>
    <CVE>CVE-2014-0415</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0415.html</URL>
        <Description>CVE-2014-0415</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="126">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.</Note>
    </Notes>
    <CVE>CVE-2014-0416</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0416.html</URL>
        <Description>CVE-2014-0416</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="127">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2014-0417</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0417.html</URL>
        <Description>CVE-2014-0417</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="128">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.</Note>
    </Notes>
    <CVE>CVE-2014-0422</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0422.html</URL>
        <Description>CVE-2014-0422</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="129">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.</Note>
    </Notes>
    <CVE>CVE-2014-0423</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0423.html</URL>
        <Description>CVE-2014-0423</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="130">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0418.</Note>
    </Notes>
    <CVE>CVE-2014-0424</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0424.html</URL>
        <Description>CVE-2014-0424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="131">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.</Note>
    </Notes>
    <CVE>CVE-2014-0428</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0428.html</URL>
        <Description>CVE-2014-0428</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/858818</URL>
        <Description>SUSE Bug 858818</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/862064</URL>
        <Description>SUSE Bug 862064</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="132">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2014-0429</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0429.html</URL>
        <Description>CVE-2014-0429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="133">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-0446</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0446.html</URL>
        <Description>CVE-2014-0446</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="134">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-0449</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0449.html</URL>
        <Description>CVE-2014-0449</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="135">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.</Note>
    </Notes>
    <CVE>CVE-2014-0451</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0451.html</URL>
        <Description>CVE-2014-0451</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="136">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.</Note>
    </Notes>
    <CVE>CVE-2014-0452</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0452.html</URL>
        <Description>CVE-2014-0452</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="137">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.</Note>
    </Notes>
    <CVE>CVE-2014-0453</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0453.html</URL>
        <Description>CVE-2014-0453</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="138">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-0457</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0457.html</URL>
        <Description>CVE-2014-0457</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="139">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.</Note>
    </Notes>
    <CVE>CVE-2014-0458</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0458.html</URL>
        <Description>CVE-2014-0458</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="140">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2014-0459</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0459.html</URL>
        <Description>CVE-2014-0459</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="141">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.</Note>
    </Notes>
    <CVE>CVE-2014-0460</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0460.html</URL>
        <Description>CVE-2014-0460</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="142">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-0461</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0461.html</URL>
        <Description>CVE-2014-0461</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="143">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.</Note>
    </Notes>
    <CVE>CVE-2014-0878</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-0878.html</URL>
        <Description>CVE-2014-0878</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="144">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.</Note>
    </Notes>
    <CVE>CVE-2014-1876</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-1876.html</URL>
        <Description>CVE-2014-1876</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/863305</URL>
        <Description>SUSE Bug 863305</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="145">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.</Note>
    </Notes>
    <CVE>CVE-2014-2398</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2398.html</URL>
        <Description>CVE-2014-2398</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="146">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2014-2401</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2401.html</URL>
        <Description>CVE-2014-2401</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="147">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-2409</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2409.html</URL>
        <Description>CVE-2014-2409</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="148">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.</Note>
    </Notes>
    <CVE>CVE-2014-2412</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2412.html</URL>
        <Description>CVE-2014-2412</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="149">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.</Note>
    </Notes>
    <CVE>CVE-2014-2414</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2414.html</URL>
        <Description>CVE-2014-2414</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="150">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-2420</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2420.html</URL>
        <Description>CVE-2014-2420</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="151">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2014-2421</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2421.html</URL>
        <Description>CVE-2014-2421</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="152">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.</Note>
    </Notes>
    <CVE>CVE-2014-2423</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2423.html</URL>
        <Description>CVE-2014-2423</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="153">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.</Note>
    </Notes>
    <CVE>CVE-2014-2427</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2427.html</URL>
        <Description>CVE-2014-2427</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873872</URL>
        <Description>SUSE Bug 873872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/873873</URL>
        <Description>SUSE Bug 873873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="154">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-2428</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-2428.html</URL>
        <Description>CVE-2014-2428</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877429</URL>
        <Description>SUSE Bug 877429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/877430</URL>
        <Description>SUSE Bug 877430</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="155">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.</Note>
    </Notes>
    <CVE>CVE-2014-3065</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-3065.html</URL>
        <Description>CVE-2014-3065</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/930365</URL>
        <Description>SUSE Bug 930365</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="156">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.</Note>
    </Notes>
    <CVE>CVE-2014-3566</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>5.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-3566.html</URL>
        <Description>CVE-2014-3566</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1011293</URL>
        <Description>SUSE Bug 1011293</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1031023</URL>
        <Description>SUSE Bug 1031023</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901223</URL>
        <Description>SUSE Bug 901223</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901254</URL>
        <Description>SUSE Bug 901254</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901277</URL>
        <Description>SUSE Bug 901277</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901748</URL>
        <Description>SUSE Bug 901748</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901757</URL>
        <Description>SUSE Bug 901757</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901759</URL>
        <Description>SUSE Bug 901759</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901889</URL>
        <Description>SUSE Bug 901889</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901968</URL>
        <Description>SUSE Bug 901968</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/902229</URL>
        <Description>SUSE Bug 902229</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/902233</URL>
        <Description>SUSE Bug 902233</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/902476</URL>
        <Description>SUSE Bug 902476</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/903405</URL>
        <Description>SUSE Bug 903405</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/903684</URL>
        <Description>SUSE Bug 903684</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/905106</URL>
        <Description>SUSE Bug 905106</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/914041</URL>
        <Description>SUSE Bug 914041</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/994144</URL>
        <Description>SUSE Bug 994144</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="157">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.</Note>
    </Notes>
    <CVE>CVE-2014-4209</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4209.html</URL>
        <Description>CVE-2014-4209</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="158">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-4218</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4218.html</URL>
        <Description>CVE-2014-4218</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="159">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.</Note>
    </Notes>
    <CVE>CVE-2014-4219</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4219.html</URL>
        <Description>CVE-2014-4219</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="160">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-4227</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4227.html</URL>
        <Description>CVE-2014-4227</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="161">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.</Note>
    </Notes>
    <CVE>CVE-2014-4244</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4244.html</URL>
        <Description>CVE-2014-4244</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="162">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.</Note>
    </Notes>
    <CVE>CVE-2014-4252</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4252.html</URL>
        <Description>CVE-2014-4252</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="163">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-4262</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4262.html</URL>
        <Description>CVE-2014-4262</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="164">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."</Note>
    </Notes>
    <CVE>CVE-2014-4263</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4263.html</URL>
        <Description>CVE-2014-4263</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="165">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-4265</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4265.html</URL>
        <Description>CVE-2014-4265</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="166">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing.</Note>
    </Notes>
    <CVE>CVE-2014-4268</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4268.html</URL>
        <Description>CVE-2014-4268</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/887530</URL>
        <Description>SUSE Bug 887530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891699</URL>
        <Description>SUSE Bug 891699</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891700</URL>
        <Description>SUSE Bug 891700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/891701</URL>
        <Description>SUSE Bug 891701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="167">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532.</Note>
    </Notes>
    <CVE>CVE-2014-4288</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>10</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:C/I:C/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-4288.html</URL>
        <Description>CVE-2014-4288</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="168">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</Note>
    </Notes>
    <CVE>CVE-2014-6456</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6456.html</URL>
        <Description>CVE-2014-6456</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="169">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.</Note>
    </Notes>
    <CVE>CVE-2014-6457</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6457.html</URL>
        <Description>CVE-2014-6457</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="170">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-6458</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6458.html</URL>
        <Description>CVE-2014-6458</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="171">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-6466</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6466.html</URL>
        <Description>CVE-2014-6466</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="172">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6527.</Note>
    </Notes>
    <CVE>CVE-2014-6476</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6476.html</URL>
        <Description>CVE-2014-6476</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="173">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-6492</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6492.html</URL>
        <Description>CVE-2014-6492</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="174">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532.</Note>
    </Notes>
    <CVE>CVE-2014-6493</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6493.html</URL>
        <Description>CVE-2014-6493</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="175">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-6502</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6502.html</URL>
        <Description>CVE-2014-6502</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="176">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532.</Note>
    </Notes>
    <CVE>CVE-2014-6503</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6503.html</URL>
        <Description>CVE-2014-6503</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="177">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-6506</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6506.html</URL>
        <Description>CVE-2014-6506</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="178">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2014-6511</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6511.html</URL>
        <Description>CVE-2014-6511</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="179">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-6512</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6512.html</URL>
        <Description>CVE-2014-6512</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="180">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.</Note>
    </Notes>
    <CVE>CVE-2014-6513</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6513.html</URL>
        <Description>CVE-2014-6513</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="181">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2014-6515</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6515.html</URL>
        <Description>CVE-2014-6515</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="182">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6476.</Note>
    </Notes>
    <CVE>CVE-2014-6527</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6527.html</URL>
        <Description>CVE-2014-6527</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="183">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.</Note>
    </Notes>
    <CVE>CVE-2014-6531</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6531.html</URL>
        <Description>CVE-2014-6531</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="184">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503.</Note>
    </Notes>
    <CVE>CVE-2014-6532</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6532.html</URL>
        <Description>CVE-2014-6532</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="185">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.</Note>
    </Notes>
    <CVE>CVE-2014-6558</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-6558.html</URL>
        <Description>CVE-2014-6558</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901239</URL>
        <Description>SUSE Bug 901239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901242</URL>
        <Description>SUSE Bug 901242</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/901246</URL>
        <Description>SUSE Bug 901246</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/904889</URL>
        <Description>SUSE Bug 904889</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="186">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.</Note>
    </Notes>
    <CVE>CVE-2014-8891</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-8891.html</URL>
        <Description>CVE-2014-8891</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/916266</URL>
        <Description>SUSE Bug 916266</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="187">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.</Note>
    </Notes>
    <CVE>CVE-2014-8892</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-8892.html</URL>
        <Description>CVE-2014-8892</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/916265</URL>
        <Description>SUSE Bug 916265</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="188">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.</Note>
    </Notes>
    <CVE>CVE-2015-0138</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0138.html</URL>
        <Description>CVE-2015-0138</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952088</URL>
        <Description>SUSE Bug 952088</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="189">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.</Note>
    </Notes>
    <CVE>CVE-2015-0192</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0192.html</URL>
        <Description>CVE-2015-0192</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952088</URL>
        <Description>SUSE Bug 952088</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="190">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.</Note>
    </Notes>
    <CVE>CVE-2015-0204</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>10</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:C/I:C/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0204.html</URL>
        <Description>CVE-2015-0204</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/912014</URL>
        <Description>SUSE Bug 912014</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/920482</URL>
        <Description>SUSE Bug 920482</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/920484</URL>
        <Description>SUSE Bug 920484</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927623</URL>
        <Description>SUSE Bug 927623</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/936787</URL>
        <Description>SUSE Bug 936787</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952088</URL>
        <Description>SUSE Bug 952088</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="191">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.</Note>
    </Notes>
    <CVE>CVE-2015-0458</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0458.html</URL>
        <Description>CVE-2015-0458</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="192">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.</Note>
    </Notes>
    <CVE>CVE-2015-0459</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0459.html</URL>
        <Description>CVE-2015-0459</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/932310</URL>
        <Description>SUSE Bug 932310</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="193">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.</Note>
    </Notes>
    <CVE>CVE-2015-0469</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0469.html</URL>
        <Description>CVE-2015-0469</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/932310</URL>
        <Description>SUSE Bug 932310</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="194">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.</Note>
    </Notes>
    <CVE>CVE-2015-0477</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0477.html</URL>
        <Description>CVE-2015-0477</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="195">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.</Note>
    </Notes>
    <CVE>CVE-2015-0478</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0478.html</URL>
        <Description>CVE-2015-0478</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/944456</URL>
        <Description>SUSE Bug 944456</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="196">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.</Note>
    </Notes>
    <CVE>CVE-2015-0480</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0480.html</URL>
        <Description>CVE-2015-0480</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="197">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.</Note>
    </Notes>
    <CVE>CVE-2015-0488</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0488.html</URL>
        <Description>CVE-2015-0488</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="198">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.</Note>
    </Notes>
    <CVE>CVE-2015-0491</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0491.html</URL>
        <Description>CVE-2015-0491</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/927591</URL>
        <Description>SUSE Bug 927591</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/932310</URL>
        <Description>SUSE Bug 932310</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="199">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.</Note>
    </Notes>
    <CVE>CVE-2015-1914</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-1914.html</URL>
        <Description>CVE-2015-1914</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952088</URL>
        <Description>SUSE Bug 952088</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="200">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.</Note>
    </Notes>
    <CVE>CVE-2015-2808</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-devel-1.6.0_sr16.2-0.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr16.2-0.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>2.6</BaseScore>
        <Vector>AV:N/AC:H/Au:N/C:P/I:N/A:N</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-2808.html</URL>
        <Description>CVE-2015-2808</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/925378</URL>
        <Description>SUSE Bug 925378</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/938248</URL>
        <Description>SUSE Bug 938248</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/938895</URL>
        <Description>SUSE Bug 938895</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952088</URL>
        <Description>SUSE Bug 952088</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
