IBM JDK updates 7R1 SR2-FP10, 7 SR8-FP10, 6R1 SR8-FP3, 6 SR16-FP3 and 5.0 SR16-FP9 correct an unspecified vulnerability identified using CVE-2014-8891. Upstream has rated this issue with CVSSv2 score of 6.8 (no vector provided).

http://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateFebruary2015

Further details of the issue should be made available via the following link:

http://www.ibm.com/support/docview.wss?uid=swg21695747

IBM JDK updates 7R1 SR2-FP10, 7 SR8-FP10, 6R1 SR8-FP3, 6 SR16-FP3 and 5.0 SR16-FP9 correct an unspecified vulnerability identified using CVE-2014-8892. Upstream has rated this issue with CVSSv2 score of 4.3 (no vector provided).

http://www.ibm.com/developerworks/java/jdk/alerts/#IBMSecurityUpdateFebruary2015

Further details of the issue should be made available via the following link:

http://www.ibm.com/support/docview.wss?uid=swg21695747

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.